27de5bb731e7cb43ae9d67b669bf909de0d352517248912c114a936f8db124e9ed12231e9baba7dbf4c93015a942524d9e5009538dca5476e2a4389cdebfb5d207594868bb7ed3c8a16132c61bda241d4e69a910fde4ebfae4d9e40a45ede70e1a7d31e509", 0x89}, {&(0x7f0000001bc0)="73d0332b66a413cdbade8c007b7004e64b786fc79f2564c057e713ce75fdb1c0400529a77f249adef8d6b06db798a58ce23d284d1fe2eb844701cf82271c9e1cfdadc55119", 0x45}, {&(0x7f0000001c40)="0b64644624068059d747abc231091ca07074131cc2699c0a8a5161ea195b5c12cfdbd6cc73fe6d505c5527cede0b9a91a00d36a97342edf4b8af30195ed82e83964a4943dc8cd02248f744963d3b251de0e40526db2bf1cdd3085d6cc8942b06f1fe155ff1ba5ac11f32312b50e6a7e426ef8442a046539c5e1129b3c25859db94cb95a54981f07eba120098b867bba04e57832c49b63aba5921556c712a0633ffefe022112c19e49b1618454e718144840fcbb1", 0xb4}, {&(0x7f0000000400)}, {&(0x7f0000001d00)="c447d25e9b8a80a518ea0688303c824958e3e9b35bbb7db35e1fe067f9a42ab92fe12ff9b4bf1bd1c5ae246539a97dc2839ec704ba2d1db9c45bc6a0239c9c98c7d590a0edc8d6937a42", 0x4a}, {&(0x7f0000001d80)="c0174ca8c2cd7302275f31d4184b19cc75a9dc6d181aa53272532675485e2731c7897ed101491df6dd0adff76fba366c46c4964c6c72367821a180c7304911613a884ac5d45e42781a7affb7fd07cc144c96", 0x52}, {&(0x7f0000001e00)="56cd234622", 0x5}, {&(0x7f0000001e40)="35cfff346767098ea7ba5756187ccb465a660c5ca55eb690e057b4a193ad31d966d2bb1dc0c29bc9f9946166cec7a582932cba042e10d4dd730402fff5954c03c0f324eb354f969e595ae72d115ba61109dc70c88102cd8105df0f6217d7", 0x5e}, {&(0x7f0000001ec0)="a84512e9b3b952f8f748899da4c3b495ad642505b35f02263c00f90c8707ebe935dedc4962550da0e5cbbb19633a802cf72dda0ab0899e78ec220997c6cac13fb19a087580a20cc277af08460779832c505ec5904b770e66e040bd06eb3150894fff18ee18a30d3e7e658a5a66f5ea4510e871ccb2255026e4fcefb4bb4cae085fc34f84ece46c4e5dbabf227102ee4de72d5fe84e9cdf5176f7837fdf46db048826ec9442b7ab0f736e93ba36a143c8d1d98a85c95222e904cc2731ef493f45c8b668b2cc2d949b7ae955aec957a41b54c673cdf0dbf9a22717f7b1180a810e644f02fc73a712199821e2e3fbbb282fb2c1f7f493bc5f3385", 0xf9}, {&(0x7f0000001fc0)="27ba98cc649e90fbb22d1e68acc335519b1900844d44a32313677caa51d3dd5432490d35862b1e38054c1869", 0x2c}], 0xa, &(0x7f00000020c0)=[{0xe0, 0x103, 0x1, "c737a719cbabf9864bac46dbc8f123f5d810fa31a6186277e1da3f50ba523ac8756b5e0230ad5ef27f0c5d8de00fe92f61c1c29bbe70640b12b883f32ad11df9d306f23e815b1f151a507fb966345050ed54e01119a87817134f2bfb5fe74bc2740c3b2690539db34d079fa745ab91106952549e56b553f891f5d0fdcfc9025ad25141e6c1ba307f006bf998620856cb9c40e0e2d706295e0375b20f7affff399fca149c8ad675faa0b57c8f4fbe92c53a3c1a4192f66815124d23b0e5f77678fedf3cdf44676459f1f72fe6285ffd"}, {0x100, 0x11f, 0x7, "b1430e751d4d57e3827580d2406b0466bedd60100bb8a1a4fab4dd3aef8b5a2f0ce3bf1c6be1d2e49d937444c6102588943d28211fd42b26520b90281c0f5dcbbfa5fab7205c497d78a071891f52396e0c8cc06cb3e89fd47113882d718292946eec559dc2bba8457850f54797603d8d272b9ab8d2ae58e5959f41127e59c416beefc9d976e9a8df733956c5ea3471e0895785ecbc446d98cd21e09e66653791239f774a9211a542e6a482e0f4e8ece76c0f9950b7cb4028b01ac510536a65142ea6f1803ccf969253d8666238019367e46b87fd85d4befbd8644787e3dc779d5b7116b1339ec1713d441a9a740f"}, {0x38, 0x117, 0x8, "c2d1b96cf2b21f0b67e6b20d699e37b4deb44172101b45df885e72fb203a2690d499"}, {0x18, 0x116, 0x0, "69b9af"}, {0xd8, 0x19d, 0xfff, "c32606bd04b844f470ae83f80152e1ead7f4c6ac0a10f8dd0da77b55ade5967925bfcec2754cd58836123f903dd11d7e480f5990ba98e086563879120c38f9c9f21a36cf5ddb5cee6341d29e59516be14c88ed464be70c9700c40a1c020b5754139615a586aba8ffc3e3eeecf1cb8a4d2e3d2b467421c0846139e65082094ef95d05d41fba09e13f168b8f3826603dca6b44caba9fb6651bfbd29256780ea96627925d98e8de2a5977c32315275caf266ce62e288709aec5c46b4f8a53156ace39eb9843d847"}], 0x308}, 0x4}, {{&(0x7f0000002400)=@isdn={0x22, 0x7, 0x101, 0x2, 0x4}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002480)="10f324e948711adadc0d63e872cbb97cf499c9bbfad1cfc2c9e5f16ee9fd46d5fe393781b52a2791bef20d2f1c01d9a80efb8afd4ef8c1f7e8afb50a9abb5406532af4d2382f5a174c652ad3293329359942cae1353785fbb9389ab3c0c77ca0a3c2194bf6aacc6e0eb82a5b57f21985108216fdc5ab5cfc0968974b110a8d074e2020549a7babc9de33e84e139338686b76cb8ec063df137a9fc0bddae30d162224f58e96fa5a4340f46511ace2357bf8e93ae71ebcff7fdce9", 0xba}, {&(0x7f0000002540)="5da52ff571bc3b35eb48002c12c6cf787136af45340790adf47e90c4d24b66b9aba9250f567df4cd3ab9ecaf2ed3842b45561bd22b9498383be4bf1a6786c148f069afcf9dbbdf500c0e2e04e567819725ddd0b795c7e3e521d56262bfe9db86cd3cd02e27388a2d3716e95c3df53696991fce474d09d0fcbed249548fac7921ce21e510f4ad9766ed3075d59df0281ab601338fb19df0f37356eaebe51963c76beba8bdc246339be5b2483c4229218097e678f8e010df1997718f9514762e149ce68a33937b174fa69534f1cf15a15c", 0xd0}, {&(0x7f0000002640)="aeca76cd3931f4d088acf65d9ae91c6f7bab07095fdee22722d32f7b56bb6a634e9b3602c690c44c5e77c4c3ed09d098bdca879439899d4b08ca30e976ddf4a5f3008ebe468d405b9741b74d7b2171f9923420f95c3842accdef18c0887a300a5ff5a7fffe1b3317f1844d8e8e0c846da76264bbf876064f03e5212677ae0c648162f334eef97336c0627e4f5fc17e5594dbaaef409547414891", 0x9a}, {&(0x7f0000002700)="3492003c7db28c9f97064fd4f581ce7d181a9397a05d959af6c8e665afc36e3cdf1d81d159b166cd2e8fdddbc3cd319a64701127b39be6610e4e33f84fce8b2e81e7df42867e40056aa77c2e2eb0131fc76de4b22f62c60941292f81a243922fed45f485bd91c910119e7ee3a6dab05db0113bc5a39caefd93484135b3801f91c41fb6b1458d3d40e5d99b5fbc87ef42d25b0d2568e72dad92fed20588d31cb6068ee11bd4c74d3f9586a7b49f1642f404e443c51354283af2561e8f808fcbe1b38adc705ec2e15c3c4bbc4c8eacf3a39590522e54833dfa585f740b5796fa70c4887d57", 0xe4}, {&(0x7f0000002800)="77f8f5e339a174f2831cde01d63d9e292036fa9f488731f6c19670c4899b6c58e4be250b1494f8a11d8d5aa157b9727fc75983b67da87aac13d433edbe2b3895d07fb5e34eec700c5fa58eed1f8c390173dc5c93c243446456773528a6ef9781073770b0f2e12a54586a5216077a10ab781b5404b9246547ac3f95b531bc005e85dc", 0x82}, {&(0x7f00000028c0)="2e1c646151d255e93355f7b74186731bd4cff4665ee3a1ed62939022547e33264f16488a7c6cdc79f8792822f32d16dd89de0787284b53ee354701c41e2193e67bb7e7b89c91c27496ec17f3d5c97776c941724cdc9e930e3be18d5a2fc2decb85de2ab5fd220588776722bf3e636e907c0903af0ef9dfee645749cdbfa5bdebd01b8303415c4648de75830c1544feae698bebd078c2d10165fce4b6609291e000d4ac18329003f9a994c991266af3fb2d54801b4d98b997feb9719afa7075", 0xbf}], 0x6, &(0x7f0000002a00)=[{0x48, 0x29, 0x3, "0cd7ceb9c96f12e8bb6b0a105013c127fbe6131df54093a426d5ccc90351dfd7164f79b942db530f89eb6b8e94b906af43"}, {0x40, 0x11, 0x8, "558f519b544dc2f02d839c58447fd3a3af9a9a2325461e6236e9056959d6700b558848f59e70877682f5da44"}, {0xa8, 0x116, 0x4, "c96f5c458e9cfecff40dfd8350fc5142ed4ea336290ee6d4fd9116800560fd289154ad1e50799f225e176336abeadf20a270f8914ba46feed4b4d44b15b5a80799dac32a176c4bd50a1b1e47d69104dccc91aa45beecd18a9222771a102bb51992bcf89dc4ab7fefb5bc87e5558e36d70c7e211170ccb560a20f0062bb8af105dce3b781a721f816ac9fc60e1a3cb4caf96f"}, {0xb0, 0x11, 0x8, "bc9aa45e2a02ba085b3d629604996ce14eee3de15df5855ba42737543a979955646fa9c3953c5b8d4d3a7c709ce38dc3480639cd08c634e8d274e706b792b591588e24221a0a3110dd9e90fbfed26df230e99c0dff82d9e1a57b4d5ce18efe17faec09502c0f217a58ad4a33af1b88632972a2b09ae7ce2980aad5493d64a93eb984ae812dcd6b0dd1538e7038a7537a4ad5fd173eaf057081"}, {0xa8, 0x114, 0x9f87, "47a8932fec5bb12dccc43dd79b35afb84d091ff373205e09548fd75622fe607826fca5a46e1b55970e07271f8be30933c2df37f85b8e48cac3c7e3e8659aeb4aa6ef9b81b382a89878cade4a30684a73338aabd0060f8c8e2b65640a736fb75a4ce854c9e92a865e77311db1746e006871e629330fc66b6e474ad3f341f087665c79d44f87ca9a92fff9383be9002f56baa2bb98be359c"}, {0x110, 0x19b, 0x401, "6d05b43ec031f9e9c3fa80ef864b6709e3be06f21098f412a0cf22391f7431ae570268d9c3209fa6c86355abbcd31e1aaa1c1d3022e52f0610c864728d34101090ffcd0b2003cff0be98906eabd2ef0b4b0215e5f8235d5d123c5986579eb66e11548d0ebfda7dbc15598c22ec5da1480a13240543d0a10b91f546ea07eee8801ee15950e0194470a197a134e37aa2ff32d59d6f0550b1e09027843c7e5a5773f17f75aea7048ad6927d964b5f89566756f3ae2d72e5e30a2c758a9fd680da212dd464bd6941d6051afc1838b9df5b0ba2a16ea3e7364331679e2d1d6618e8cb4e51c4d580aa00c01198d7282f34f297cbfc4e8aeb3d18ccb7"}], 0x398}, 0x3}, {{&(0x7f0000002dc0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002e40)="f5094079b14ce0b492299f599dea33b3f11e38e3858be5d3ea31ad43d36e8d796e45f6598d5a0bca04bc71129d595cfb34169ed21c59b6", 0x37}], 0x1, &(0x7f0000002ec0)=[{0x50, 0x108, 0x9, "4b7845c7c6a2e88df22d3a0e00019b36206aaaa55dfe7cebb2f2f8a6373eb8b7a7e3382db5860c41975eece99e376d06d7559b7929ab3386c7b5deb86f"}, {0xf8, 0x13f, 0x1ff, "af7e73ea30a41b22f67a7dab9a874400b7501114ca1c7d605677b749b1badba3606dda252a7a4be5079523b7ec040e1a93c2797eaa924aa1382b82643b148b3f377d40f9bedd28fbb0a2b1a996c373194c642a7d6415c1a631961119a7bee644ec0bb88872a9e2b69a2f43c62cd41ba66240eb3ba9aca0e0d2ec2710a3082ab2849241f294439a7667130a5bbc0a1159331c6304611694515041327b8037145f15e0cabecba91525a55d03b5aa4d875a8c51efb8596bda8e53d0a0f49b2ac7a4e9d2a3ecbbeb173f34cb57274d242624d1fb818bbc6cd1b3881b046efc4ae60b460660f1d61b14"}, {0x1010, 0x117, 0x3f, "c3aa74b62346c964a9ade4e5c93798842d514455e3918de3860ca0fea6480ee1950294276ef89062a3bee5a112f3a9986b69d2ec72ab04c6098c3897b8bafafd12871c93ef1ab928fbbda519ac88096385987bcabf1a85d2455558fce0ce1f74dd3880272e863f20aee67553a974e966fcbf6c3598b00cbfc0ab49bcd76aa103e7fcff4a0d8dde703912b826d3d8cb8a122a86c20ea650e579e5df2fcc81aa79ac749ea5190981ae42f24d42c1d24a806a7aff60a0a20507fc2b37d570adb7f2edff9cadf0a2ac8da0e86553123d4fcb532ab0388bfe0f9eabdef8ff99f2121d9d07cbccd25e6ab0c53857da16f03365114751a49eb9c847416bd860798bfdba7f3126dfeb402901835e14f9c7c8a05f361d61209416692062d45a48d4ac74e4fd72190af8cc1e8010c11aa1ff427e2f4b3fa8f125eae442559c641cdfcaaa517ca49687727fec9b25f676d6cf26c0d152ae01453f23a181deda75154dbe282697caeb0c8a97818da4533d087a54b84f19f95a76a2ab31daa8f2e72ca3bb88b382791fc3ac50fabe7a9c4faa2ab28fcc7e33e106df3145ca75472d4ce84d57751d5ccbbfed900a8cf9052416ad0d7b6956d46f4f48cab21772b50c9aa7eb4faf962c2130f7b2bbadc6e27024e02936299cd0b636dd3469d862bc8fc894fd79f977f30b8224b30fb3a6d5907d91dae5a760387e32dfddb927bbd6918bf779f4957ca699a2e6d035497e56caed41444ac8649456cc3ceef6d34f0bb9a04bb681f9ca10acb5f0340a054a2a78431b779830cf14b14ed64ff46ca436e5ec9c81cd3b9b1cf3310c2959e18d3ca7aa2340bb816c908b1a3f6165f153238928d85c40847cc764248c09874a2fc3c03e4ce6425577dc20cf9d187a089a4452e35089354d52ad20c96e320ed5988d94f91f4d54f41c5566926fb116044ab334076424b0a2539ac6d121995a41871b60dad5f2b1dc0e98278ada73624fe1520205e4cc8258a1d6fc9ed588eb61fee709b60e90524c6e0261bae103727b590f9f488e822d1e259c1ac4c4bba4a2eb1ae262a15f888b23feb619297598899886055dfe3c54911cfedd973c618bfb1a0819525d41f95f0f7b063a44ecd83174b62c3b9bf83738c80042476fe87c96bbb55ecbdd9b81d4247b4937b400d3b5e3422912362e9436389ae184ac41ffb9a4fc11fbdcd0e7de83edc191ebd5719b4c659d213621fb3bb3936f765b6863e950671d50f178bb76a1dde7f93af529ea1e890b94ebc1ca3fc891e7189bbc998ac9b5e65225cfb9808dfb9f45b353756471fcaa73c4ca9ed099b3ddd8115c4d3bfac089032e25f5035054e006f4c21a381cfc30ae98fd1848a7f9a5b1215b0007a31e5b7c599c1b9b51fc4d9e4907629354e513ad729744d4c68ec60e0adcc1ec17a8b9c9fb1e4eab5107a3f9f60a8519e91966cbaff8d5a6e7eebda4a93401928ebc9cb26a7aa5ab658c4e2662ef78feb126a3c03dadf08f8c31abfdec00999e14e5da0c64d222d3087f371f7bd8c1df524a7ef3c95795f8c82ffe6eeac3b37a8b74c0baec1bd5f46eb6cdc0616568bb8f35880875d16563841d90a761201ef0f21753de6580ea5fd00a60ac65513bb3f409076906737286864d93d82e45fb731497cd270b83f199547adfbd678f283dc1afa182d4f20b549d812cac6f0d3402a118a7ceb47f4c0b6124ce1c3a774ea15f83e9625f6ea972cab4796c0f7c0d4afbdc3b7d95da539024c7c843ca9b639b4bf502ab068eea6e4972c5bbd158dcfa20e8de33fac68c612a2c2136c021e00c9f4cb01eedabc0a24618d8c492504b0c344af33cbd60d5e33f0e7998170c83e3e591c2817eedd24781612a23ae4d5077e5bbdcb25190fa5f92eeeb8d015e7bf3aeb42e698f91f047702243fbda207badfa34ad205252e2b8f67f4928e3834c4c0090d1bef640acf2f34c4e0922ed6183c3a988e6496e3175de8b57d594395293a61e52eed79cb9b2601251d095e2e8f76953d5e50488479602cf8447d801fbdfb63ea90355a0ba293436fe8bff6749cc3ad2ab7e52bbd18e425e121781e0a881683e39deefafbbff9fd19a29849d619e087dd3dadb1be54a50b1aeb46239672cd30770263e5f1a1b210cdf640063262d503248277bbf0f7869e8b7790f47bd4ef7cb5ca3fe99972514070533920d5cdbcc294fde43e3ae10f7271ecd87ad88680965f98b39d6a97cdce5c09af318132602400e1b1e9a882444ce00732b10e0a55cf9684e499564c0ed59fcf569c34b939b687d2987dd3d414f131c3905603965c661005c1827f8caa7b423f35ce515db099d423c389ceb127e4172b0f89beb13a96769c6933afebda68a8944d52dd86779812bb7c0f970c1329731cda857c13a42e8479f3c99810fc6003e6f0b8b7b865376f8961f2a9428e002f660f06722d902c2da204fb81f55acd2067438a0d09a98bb1d9f5fda0e8b09007d007ac05156a810e6da4e4da16b98e38adcf95ead7cc3a02e7caa30f96f9600c947f428a1e7dcf2b41c1a8614adf996942786444a5e679f9910234aa4f949e2243faae0afbc5eb58cae4ded5678c570932e4a95f7844545e28e668c66ce44a5298a3657b35f1c04ec14aa0809d2960a8ad2cc070b018e3b2d6215d6f68fed0e8fbd1649cfebdf4b866bd5477f835928d8af89516c6eafb99dbdbdee0b38d9204c3b00dfc9fb6ccb1ec0290be36d74a86520fd4912d0ce8619bb568e9991ac91178aa35020861ba7eaba48b141e0e475930ced2304bb6fef0899f11f52788f102921f258d87c162535efd6cc1c88752f0b194d51ebe6828aa8238f812dfde004a89aae8b3377b8ebaaf43b188d6f9d5bd013e262b8baaa7ef5eb6395e4a33b1d2b62def43d63ba6da4831c645a2ea5948bc8af3df5dbb9877007d7ec15570b0bad16072fc5b29da17d88bfde4a44cae40ca9dd0c7fb73a329067c93237a62a7324f668b1c1cb8cb56b20ed81a888da240929ee5c840391642c68d3ba8172ba4e839a19895603cceade2bfcadfb0b97f24122cb73249c152f2aca4f835776aa78f5605d12b976d4a845d693666be81e99bb40541406cb3c7be73c5bb22f283c751c9031deee6fca36d56350ba4e87eba986804eeee4bcee99d1729785f290f300af996c2789cb1c6f4c21c1eae9f92db30385070833e11958626e8cc2de9bc9e7df04b43864944dec503c5e8d3fd3886a487dc886f2adf9e4a26beeabd9bf07ce28786aa39dfaa2f11d3285e5a5aba4798c36ee5a7a90dab203c3aeb18d3a309cf47c30d116f79e93a8c0c0f641c1291280e6b6d8c95e6eba40dc63ce69544448e487692e6328c8200ddeb56b9ed089b4501d55152e856cbb321651e7f03e89a46bfe528f4361f6468147eee8677a084f750ade63e7bda265fb0276a1a645eebb32ec027a2f8352a1dd78b7a6fc1de73ea740f55497febbb636ab63fa34af8d4724f198077323d0288f91456484c532c748e8983ddf7dabf799eb39474a3c957a669dca1edac4087505a6b917094cb8ccb038ebd9953885ba2d090fcc22c21a7aee0365d003a0ac38198b7a703053432f08dd4ec609331b67a7a6caf71feb65a0f5ebcde90d0e54e49eeb1d308cbd349ada159c6e5f0deaaa8b0e52d75d34bbcd9b7e8ec6d690b610a2da8fcb3902693cb541ce1cb8998146b73741edf422c5d2ac2e71ea50824a19af7cf5f03d06af145bc7ea21e80ea6be0c70749a0fdaedb5162e129279e8f2103e4f7bab1596d3156d1a3b476afde9664e5833043f7386b6667d39a316855e20eebbe0c1e5712afa640ff9823269b5e309a7abef4c27900b350ff1b72023b427d7242c0b830ed39770124e1d0b0588fd90634bc7d63f14b6616172ee40ab678a2395983553e12ed79c3110efbbeff3333f552a118eb4c5ae2c0d4ba54f69e1ca90c16f7ab4415cd5bb42176c9c3f1c9375743ea9986cc85fc03abb3d35d469f0caf861197e0a94eb2143dab2a5fca8265636710fc080bee334473c253a7c7d36cc4df93bd18ae7be53a287c2a7f0e9187f2e9d6e6603ea49416a7a32b00685d18315c580c17d8c0e4f74b463974966ed859e27ceaf44d5d78dc56a881c8bffc4f092551a45b35479eb05888c23549bf6d4ed0009e64633c7919dec523e089091260e4f75c56985079c1d56030284409efd518949152ab90f81ce3d5daafa8ac3c2be1349bfd6dbe1298a24203c8cdee73e280c1d4a0cb23f95c3a2927f014c09447f4bb342df8f89c13fc55aabe310628c9a363f7a419c61c49fab40730d91d1abf6fb262e75f26dee2261e2a40b201876f4bba32a428881c7534a8b8f6c68ab25bbd8c26fca33104858779bbae1cc02db033fab551485fb89eb62b576ad71aecc104d7a5c794c6e1c2020d25ebf36ab3fdb191cfeec05d6c2b8738a63542802a3f99ecdc1aa33f3278f308465cc6d2c784e0ce46c261d82fa1d5ec272ec2e05d8a2ceb48ce4dfb0ed2a34ca9606358bd3426ab34e0081eff87acb5f1dd9643ed163b93a0c4f82e8095fb9a5ebc04f47c868fc44988b3b31350d07a6854c9def1af241c74fc43e14d66bf0266b51b8973336582224ac8bf20f3b1c9d082f9c1d36b9d322b31d211f5ad10a0c8f68689a6278838b26c896f506fae3dcdf0a03ff1d6c5b1cb1a53c0170be21deaa29f19a7857e5484dbf80277ce0d982065932f73da2ff3eb2fed9f994167156911769f90f7182af0283819572ba47b746216bef987438928c84ec212c99db1da569e1b104f721db2e2228797b68c56f3c4089c66caf56ce5d5bc2c019d9240fca7fe79d76e2a337398a09f32de2cc6658cfbc3724d9678bef01123ec5d5cf03be1a12843b4ab18f344ac714f72a506e46133c02d8cc7e3b3e36bfd4927f3d724f06f1e46c6ed2203ef699c35384926aab7092d35d8de8bdc1259a8aa6ea719ff0ec39238e42c0f10b259cccda41f40cb16b15a82989509ed6782677f798c840f1a426700b37c2b968e7e5b3bd4723491520f98ea9b1ed49f4abcf32125dfde5601fa90150a7b570466ab4bed0ae1bccd834ecb3598ca0a51e29a1aab2a100150ee540701f49c04a4b643d6fbc36a8f057dd20ae785b24c48e910d42d43814f39b5784f789ceb4b3d429e5b0c1d8da4f2b363a8da8ff1d5051218f169bdd4b697a5c58ffbb28528110e5dc89136364b37b332b0d594ea412026d9b514ca47d864724d2983b6485bda074fc9b2a288a45b12fc8df9489c40e0981b9e43417fcaf2d7cbf7cddf2e87d27430d818c050aa1c6770995dd0b3b94ca71eac0538308f837199d0a216a7255e4dfa794a704ace38b1ef111c55cf74dd5ebd58af60e0b8a13e7f6e9eb933d9f9f58681ff1c3f7e61956e2f7d4c472ce09ebd0ee1277ec0f096568c2f7a5f685d430dd05401a038331fe0fc4f3926e0535857f8a29c0d5871d90cc20e9b1aec552a91cb1e5cf3f0945ab02772af36b74676c849841c7433858bf788226fce64a8d2487143db814f4fd9f56a263e5ea6558102b566fe2b684781cd1b3e48d476b10d1490bf7745f51c3ad5395a2bb67057feadf70a085b9f5cbe52c3a7edbfda69683020e0c945cc4a7b2146a0d74f712418c962935064630af92e1cdd6b664f33031fa354df98739efb7432c2b34c045d8ea03265bb114d520ae157f778042751fd36517a31fea60c7f451c2e389f56156f71d6d6a76086afe9ea32c5b77ec2b989cffccb4477d519d50e9cfb56acf7bd65e2cfb9f2f3546ec0b3a4e65a7e4b0c5a2af2373a5e2987f9b38c54fe063b8aa6f"}, {0x68, 0x1ff, 0x0, "5acc1dcd87f23339f5aa3a4f853d78201449ae0f31ad6b1c0daeecacd45b4c1f42e065105858524e21341345dbf65d579a713b9d7513a7a0a749195531d00dcefb048aaf8fb964cf2a3f85336695b17bfb"}, {0x18, 0x84, 0x10001, "b26abd5a9c"}, {0x58, 0x10f, 0x3, "2187f71b2caa9d39c227cb3b263d57020f557167e91f89ccf407b515bf4896129863019548b7fe547eb5d02bb573178abf6490094cbc6ece1c9345e2bb25b1bb21a53185998c8c"}, {0xd0, 0x116, 0x400, "ba9ac77d38b52085f5ac518133e3b1f6abce5dccc7c19ee7f7bfe3e0b900aad0fcbef6a1185aa13bae22af6302a67b9d19b21da65a2fc2354797510362889b954412607ce6fafe015865ff5c4868d7a8e06ee91c2489e7daeedda69712d7419428878f62f0d220bbb6c02b3b32bacd741abdc11445c62b991a0bd36298b475bece74226b9339b81e8bb65098f8bcda11cc1f8584b9dcee4a850fb16261caec00d019397b48664bd76c1eee569b63ea81ced14b6ebaa17ced2db1c0b8"}], 0x1300}, 0xffffffffffffff5c}, {{&(0x7f00000041c0)=@in6={0xa, 0x4e23, 0xc0f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000004240)="8435ba0a26149d43b5307535863a4accc32ac8e5c9324518e54de499049a001e7a87226b7cc84ddb256b4d7b9454ee1a14b626a786ce2c6beae5621289f8fc81e4c0e1c3093b6b157ff1abd47519999d165a8288c6062191dc640d03df89e325238b3eb5be6ed9910694e2b58dd85de62999f564cc118fe629453058b8d28f5863b04d0aa137410d888134c2dec897b6d180596f4eaed79c66f3b6f68664252ae44389c557524a6d692e3996c07147bd32495d07aa641689610400", 0xbb}, {&(0x7f0000004300)="f42c7388fe30c5ac0fd91dad3b35472a34131f32b93e3136007342da20206da3cde757e38b085a293e2cd1282c37", 0x2e}, {&(0x7f0000004340)="d855f88dab638137e9484d325d63dd894a7af5c90359793695e0212acd5dbdbcbf6eeef214a6", 0x26}, {&(0x7f0000004380)="55881c09db1cddea58fcce8ebd1053cd1001", 0x12}], 0x4, &(0x7f0000004400)=[{0x1010, 0x0, 0x4, "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"}, {0x110, 0x13e, 0x5, "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"}, {0xb8, 0x3a, 0x3f, "51069abac6f6bbbfead82cdc5f3c3273e49f8bee35351252529f131272ebab6f36e22ce7c917f20075a0393865b3bb7c4f08540cd696eb006e722a75418e6a98e0e51031917ae557683d6dfbb04125afa43e987f9b17b4d6dcdf9ebd7ce45c8964c8162fc072e9ac74f0ba8bdc34713faeed016a6ccf0b022291668659ea86117bf7afaa2c45858c3d51c17f80dd636e9481dd3eead1bdf7fe94e8ca4802a7a2efda7ef0"}], 0x11d8}, 0x3}], 0x5, 0x20000010) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:48:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x30) 06:48:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:48:49 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}, r1}}, 0x30) [ 2087.826183][ T2241] FAT-fs (loop1): bogus number of reserved sectors [ 2087.840432][ T2241] FAT-fs (loop1): Can't find a valid FAT filesystem 06:48:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x30) 06:48:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2087.912922][ T2241] FAT-fs (loop1): bogus number of reserved sectors [ 2087.931428][ T2272] XFS (loop2): Invalid superblock magic number 06:48:49 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) r2 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\x00', 0xfffffffffffffffc) r3 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="2463624a787b07ce034e2c231b5622c5d23600e13ea5c5ede74b86f771f5f6c8a48a50ec3e5ff17fa7e4165d684998264cb667cc9c62272aa130f99741edda6b18c0ce4dd1d6fd33725adb8760884206a8b7c94a2fff3a8cc241056a65823f9c13", 0x61, 0xfffffffffffffffc) r4 = request_key(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='/dev/swradio#\x00', 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000003c0)={r2, r3, r4}, &(0x7f0000000400)=""/38, 0x26, &(0x7f0000000580)={&(0x7f0000000440)={'sha384-generic\x00'}, &(0x7f0000000480)="ab873249077f4bc8f417734d9297fd67167f8122325bbb88e7b10e66f66f7cbfd0f9e256da5c95ed5e940ce6f16884307866c02d6a51fa3e04c930a1a4ca6d369316c8658f2aeb9c9a9f123cc957d0d5709a700150ed7ef0919df0acb892a02a6181f72dfce36900a43e77feb41e3e305e139c13d30c46401d3d253dd6f9a4528a8a706faabbd54326f0d672e3d7e2af0c714e75dd2bfcf65c210474e65a4cbc6efb47e92c056e398f341bb925ad98064b013a24a8ff3f4289676303035e1d077552a5c83f8667d3a3de37cddb0fa02b1221ece5e96f1e1dc9116a8c700b1e9bb8", 0xe1}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r0, 0x101}}, 0x10) [ 2087.965115][ T2241] FAT-fs (loop1): Can't find a valid FAT filesystem 06:48:50 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x5, 0x0, 0x0, 0x0, 0x0) 06:48:50 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}, r1}}, 0x30) 06:48:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:48:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:48:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x30) 06:48:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x4800) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={@broadcast, @empty, 0x0}, &(0x7f0000000080)=0xc) bind$xdp(r2, &(0x7f00000000c0)={0x2c, 0x4, r3, 0x23, r0}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 2088.758006][ T2482] sg_write: 13 callbacks suppressed [ 2088.758018][ T2482] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2088.758018][ T2482] program syz-executor.0 not setting count and/or reply_len properly 06:48:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:48:50 executing program 3 (fault-call:3 fault-nth:0): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:48:50 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}, r1}}, 0x30) [ 2088.813826][ T2488] FAT-fs (loop1): bogus number of reserved sectors [ 2088.831519][ T2488] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2088.864161][ T2528] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2088.864161][ T2528] program syz-executor.0 not setting count and/or reply_len properly 06:48:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0xbfffffff, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:48:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:48:50 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}, r1}}, 0x30) [ 2088.905080][ T2488] FAT-fs (loop1): bogus number of reserved sectors [ 2088.928508][ T2488] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2088.949157][ T2498] XFS (loop2): Invalid superblock magic number [ 2089.017636][ T2631] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2089.017636][ T2631] program syz-executor.0 not setting count and/or reply_len properly 06:48:51 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x0, 0x0, 0x0, 0x0) 06:48:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0xffffffee) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:48:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:48:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x16, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:48:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:48:51 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2089.938076][ T2643] FAT-fs (loop1): bogus number of reserved sectors [ 2089.944610][ T2643] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2089.972225][ T2652] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; 06:48:51 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:48:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x20000030, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) [ 2089.972225][ T2652] program syz-executor.0 not setting count and/or reply_len properly 06:48:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2090.024262][ T2652] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2090.024262][ T2652] program syz-executor.0 not setting count and/or reply_len properly 06:48:51 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2090.096712][ T2643] FAT-fs (loop1): bogus number of reserved sectors [ 2090.107213][ T2742] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2090.107213][ T2742] program syz-executor.0 not setting count and/or reply_len properly [ 2090.122025][ T2643] FAT-fs (loop1): Can't find a valid FAT filesystem 06:48:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa08, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:48:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2090.223282][ T2661] XFS (loop2): Invalid superblock magic number [ 2090.264936][ T2797] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2090.264936][ T2797] program syz-executor.0 not setting count and/or reply_len properly 06:48:52 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x0, 0x0, 0x0, 0x0) 06:48:52 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={r3, 0x8c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x5e, @dev={0xfe, 0x80, [], 0x2b}, 0x8}, @in6={0xa, 0x4e20, 0x101, @rand_addr="379c27b9e5f7ad21c195706d84b617ab", 0x8}, @in6={0xa, 0x4e24, 0x3, @local, 0xfffffffffffff3d1}, @in6={0xa, 0x4e22, 0x100000001, @local, 0x1}, @in6={0xa, 0x4e23, 0x400, @mcast2, 0x40}]}, &(0x7f0000000200)=0x10) 06:48:52 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}, r1}}, 0x30) 06:48:52 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x3000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:48:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x8, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:48:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2091.176201][ T2814] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2091.176201][ T2814] program syz-executor.0 not setting count and/or reply_len properly 06:48:53 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x8000000, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:48:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2091.239070][ T2811] FAT-fs (loop1): bogus number of reserved sectors [ 2091.267450][ T2811] FAT-fs (loop1): Can't find a valid FAT filesystem 06:48:53 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}, r1}}, 0x30) [ 2091.352601][ T2811] FAT-fs (loop1): bogus number of reserved sectors [ 2091.364022][ T2811] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2091.368642][ T3015] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2091.368642][ T3015] program syz-executor.0 not setting count and/or reply_len properly [ 2091.394884][ T2943] XFS (loop2): Invalid superblock magic number 06:48:53 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:48:53 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x800000000000000, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:48:53 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) accept$alg(r1, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) 06:48:54 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x4000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:48:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:48:54 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:48:54 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) 06:48:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:48:54 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x6, 0x1f, "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", 0xd2, 0x896c, 0x8d, 0x7, 0xfff, 0x8000, 0x400}, r1}}, 0x120) 06:48:54 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2092.232677][ T3207] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2092.232677][ T3207] program syz-executor.0 not setting count and/or reply_len properly 06:48:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0x1b, 0x0, 0x0, @mcast1}, r1}}, 0x30) [ 2092.283886][ T3206] FAT-fs (loop1): bogus number of reserved sectors 06:48:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2092.337568][ T3206] FAT-fs (loop1): Can't find a valid FAT filesystem 06:48:54 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) fcntl$setpipe(r0, 0x407, 0x1) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1, 0x80000000}}, 0x10) 06:48:54 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:48:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2092.408890][ T3263] XFS (loop2): Invalid superblock magic number [ 2092.434806][ T3206] FAT-fs (loop1): bogus number of reserved sectors [ 2092.441522][ T3206] FAT-fs (loop1): Can't find a valid FAT filesystem 06:48:54 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x5000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:48:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x8, 0x0, @mcast1}, r1}}, 0x30) 06:48:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2092.593796][ T3426] FAT-fs (loop1): bogus number of reserved sectors [ 2092.621264][ T3426] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2092.707290][ T3426] FAT-fs (loop1): bogus number of reserved sectors [ 2092.720570][ T3426] FAT-fs (loop1): Can't find a valid FAT filesystem 06:48:55 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x0, 0x0, 0x0, 0x0) 06:48:55 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:48:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='/\x00', 0xfffffffffffffff8) setxattr$security_smack_entry(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.SMACK64IPIN\x00', &(0x7f0000000200)='keyring\x00', 0x8, 0x3) r3 = add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$negate(0xd, r2, 0x4, r3) 06:48:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:48:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x8000000, 0x0, @mcast1}, r1}}, 0x30) 06:48:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x6000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:48:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2093.225263][ T3501] FAT-fs (loop1): bogus number of reserved sectors [ 2093.238377][ T3501] FAT-fs (loop1): Can't find a valid FAT filesystem 06:48:55 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:48:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x800000000000000, 0x0, @mcast1}, r1}}, 0x30) 06:48:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2093.321575][ T3501] FAT-fs (loop1): bogus number of reserved sectors [ 2093.332516][ T3501] FAT-fs (loop1): Can't find a valid FAT filesystem 06:48:55 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:48:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x7000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2093.434867][ T3510] XFS (loop2): Invalid superblock magic number [ 2093.505633][ T3640] FAT-fs (loop1): bogus number of reserved sectors [ 2093.518367][ T3640] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2093.574938][ T3640] FAT-fs (loop1): bogus number of reserved sectors [ 2093.590935][ T3640] FAT-fs (loop1): Can't find a valid FAT filesystem 06:48:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x149000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x154, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x277}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2000000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xeb7}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffffffffff80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x68}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x83}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf3e}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4985}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x80}, 0x50) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:48:56 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xa, 0x0, 0x0, 0x0, 0x0) 06:48:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:48:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x8, @mcast1}, r1}}, 0x30) 06:48:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:48:56 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2094.358611][ T3664] sg_write: 7 callbacks suppressed [ 2094.358623][ T3664] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2094.358623][ T3664] program syz-executor.0 not setting count and/or reply_len properly [ 2094.397868][ T3657] FAT-fs (loop1): bogus number of reserved sectors 06:48:56 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2094.448151][ T3657] FAT-fs (loop1): Can't find a valid FAT filesystem 06:48:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x2d4000, 0x0) ustat(0x6, &(0x7f0000000180)) setsockopt(r1, 0x2, 0x0, &(0x7f0000000080)="4b86c785fcb7ccb428ecbcafcf7906be3fa99447fd1e9212e44cb849d38b4d1220795359f0bb22f0e5afda7b392a18610f97dabeb242388a396e91f1837099a5990acdcd49f0b8530d74474b336d2fa09167b01cb06a8d242e61eea94259e69cad98820f8050db0a36d26eeb23f142bdcea3d31358c3a464612884b0950f7dbd9b17bb8382dc849e7199a48885d2bdadd81c748d88fc2b6ed6294c1bbb33517e5d06083478f2a5efc68da0dd484c4f96438b4c142ff30fd436d4059b6c4b8096ee57106f46c3a0b6d9c3a5b47ff29c5e5f18cd55ed064a6d449224af9bb2759d66de76777c712476fd5827f51aa2bf8a9bc816", 0xf3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x2fb, 0xfa00, {r2}}, 0x2d8) 06:48:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:48:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x8000000, @mcast1}, r1}}, 0x30) [ 2094.522628][ T3657] FAT-fs (loop1): bogus number of reserved sectors [ 2094.537086][ T3657] FAT-fs (loop1): Can't find a valid FAT filesystem 06:48:56 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2094.570263][ T3742] XFS (loop2): Invalid superblock magic number 06:48:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x9000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2094.639951][ T3901] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2094.639951][ T3901] program syz-executor.0 not setting count and/or reply_len properly 06:48:56 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2094.761900][ T3990] FAT-fs (loop1): bogus number of reserved sectors [ 2094.786139][ T3990] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2094.859103][ T3990] FAT-fs (loop1): bogus number of reserved sectors [ 2094.869516][ T3990] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2094.991082][ T3742] XFS (loop2): Invalid superblock magic number 06:48:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:48:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x800000000000000, @mcast1}, r1}}, 0x30) 06:48:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x3e, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x111, 0xfffffffffffffffd}}, 0xffe6) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) accept(r2, &(0x7f0000000100), &(0x7f0000000180)=0x80) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={r3, 0x400}, 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x1e}, 0xd7}}}, 0x84) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x4000, 0x0) 06:48:57 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xd, 0x0, 0x0, 0x0, 0x0) 06:48:57 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:48:57 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xa000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2095.438154][ T4031] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2095.438154][ T4031] program syz-executor.0 not setting count and/or reply_len properly [ 2095.463035][ T4031] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2095.463035][ T4031] program syz-executor.0 not setting count and/or reply_len properly 06:48:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:48:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x223}}, r1}}, 0x30) 06:48:57 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) [ 2095.534379][ T4037] FAT-fs (loop1): bogus number of reserved sectors [ 2095.553875][ T4037] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2095.566122][ T4092] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2095.566122][ T4092] program syz-executor.0 not setting count and/or reply_len properly 06:48:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:48:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x300}}, r1}}, 0x30) 06:48:57 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) [ 2095.658687][ T4037] FAT-fs (loop1): bogus number of reserved sectors [ 2095.680386][ T4078] XFS (loop2): Invalid superblock magic number [ 2095.686181][ T4037] FAT-fs (loop1): Can't find a valid FAT filesystem 06:48:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ioprio_get$pid(0x2, r1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) r3 = dup2(r0, r0) ioctl$RTC_PIE_ON(r3, 0x7005) [ 2095.709616][ T4166] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2095.709616][ T4166] program syz-executor.0 not setting count and/or reply_len properly 06:48:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:48:57 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) [ 2095.858945][ T4197] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2095.858945][ T4197] program syz-executor.0 not setting count and/or reply_len properly 06:48:58 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xe, 0x0, 0x0, 0x0, 0x0) 06:48:58 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x10000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:48:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x8]}}, r1}}, 0x30) 06:48:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0xbfffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:48:58 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:48:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ptrace$poke(0x5, r1, &(0x7f00000000c0), 0x100000000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0xff20, 0xfa00, {r2}}, 0x10) 06:48:58 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2096.447157][ T4302] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2096.447157][ T4302] program syz-executor.0 not setting count and/or reply_len properly 06:48:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x8000000]}}, r1}}, 0x30) [ 2096.515057][ T4300] FAT-fs (loop1): bogus number of reserved sectors [ 2096.530453][ T4300] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2096.542191][ T4302] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2096.542191][ T4302] program syz-executor.0 not setting count and/or reply_len properly 06:48:58 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2096.615093][ T4300] FAT-fs (loop1): bogus number of reserved sectors 06:48:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x800000000000000]}}, r1}}, 0x30) 06:48:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:48:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 2096.665272][ T4300] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2096.672773][ T4315] XFS (loop2): Invalid superblock magic number [ 2096.800349][ T4438] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2096.800349][ T4438] program syz-executor.0 not setting count and/or reply_len properly 06:48:59 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x14000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:48:59 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:48:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:48:59 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x23, 0x0, 0x0, 0x0, 0x0) 06:48:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x8]}}, r1}}, 0x30) 06:48:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x80) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000040)={0x3, 0x5}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:48:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:48:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x8000000]}}, r1}}, 0x30) [ 2097.605786][ T4559] FAT-fs (loop1): bogus number of reserved sectors [ 2097.629062][ T4559] FAT-fs (loop1): Can't find a valid FAT filesystem 06:48:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:48:59 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r0}}, 0x10) 06:48:59 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2097.714754][ T4559] FAT-fs (loop1): bogus number of reserved sectors [ 2097.732231][ T4559] FAT-fs (loop1): Can't find a valid FAT filesystem 06:48:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x800000000000000]}}, r1}}, 0x30) [ 2097.785518][ T4664] XFS (loop2): Invalid superblock magic number 06:48:59 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x1f000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:48:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:48:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101101, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@dev, @in6}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) [ 2097.935612][ T4801] FAT-fs (loop1): bogus number of reserved sectors [ 2097.968018][ T4801] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2098.027612][ T4801] FAT-fs (loop1): bogus number of reserved sectors [ 2098.040144][ T4801] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:00 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x47, 0x0, 0x0, 0x0, 0x0) 06:49:00 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x8]}}, r1}}, 0x30) 06:49:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:00 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:00 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 06:49:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x8000000]}}, r1}}, 0x30) 06:49:00 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}}}}, 0x30) [ 2098.509899][ T4924] FAT-fs (loop1): bogus number of reserved sectors [ 2098.537578][ T4924] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:00 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400100, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000040)={0x7fff, 0x9, 0x4, 0x5}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x24, 0x1, @thr={&(0x7f0000000080)="f425dfe4a254cd322ca977aed9aec0db27d4e5b860da12c44b7102b29fd3cd31021e68ea8fa541", &(0x7f0000000480)="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"}}) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 06:49:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x800000000000000]}}, r1}}, 0x30) [ 2098.643186][ T4924] FAT-fs (loop1): bogus number of reserved sectors [ 2098.663367][ T4924] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2098.744592][ T4973] XFS (loop2): Invalid superblock magic number 06:49:01 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x48, 0x0, 0x0, 0x0, 0x0) 06:49:01 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}}}}, 0x30) 06:49:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:01 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x20100000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x8]}}, r1}}, 0x30) 06:49:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffeb7, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0xffffffffffffff08, 0xfa00, {r1, 0x2000004}}, 0xfffffd47) [ 2099.581747][ T5182] sg_write: 7 callbacks suppressed [ 2099.581760][ T5182] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2099.581760][ T5182] program syz-executor.0 not setting count and/or reply_len properly 06:49:01 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}}}}, 0x30) 06:49:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x8000000]}}, r1}}, 0x30) 06:49:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2099.674985][ T5183] FAT-fs (loop1): bogus number of reserved sectors [ 2099.726597][ T5183] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:01 executing program 5: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xa, 0x0, 0x0, 0x0, 0x0) [ 2099.794944][ T5309] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2099.794944][ T5309] program syz-executor.0 not setting count and/or reply_len properly [ 2099.816239][ T5246] XFS (loop2): Invalid superblock magic number 06:49:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000040), 0x1) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:49:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x800000000000000]}}, r1}}, 0x30) [ 2099.849548][ T5183] FAT-fs (loop1): bogus number of reserved sectors [ 2099.890534][ T5183] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2100.046431][ T5316] XFS (loop5): Invalid superblock magic number 06:49:02 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x49, 0x0, 0x0, 0x0, 0x0) 06:49:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:02 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x220f0000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x8]}}, r1}}, 0x30) 06:49:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3ff, 0x41) getsockopt$inet_dccp_int(r2, 0x21, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000000c0)) 06:49:02 executing program 5 (fault-call:2 fault-nth:0): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2100.635186][ T5442] FAT-fs (loop1): bogus number of reserved sectors [ 2100.656284][ T5442] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2100.674518][ T5452] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; 06:49:02 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2100.674518][ T5452] program syz-executor.0 not setting count and/or reply_len properly 06:49:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x8000000]}}, r1}}, 0x30) 06:49:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:02 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x16, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2100.765174][ T5442] FAT-fs (loop1): bogus number of reserved sectors [ 2100.793395][ T5442] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:02 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x23000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x800000000000000]}}, r1}}, 0x30) [ 2100.869421][ T5566] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2100.869421][ T5566] program syz-executor.0 not setting count and/or reply_len properly [ 2100.908846][ T5476] XFS (loop2): Invalid superblock magic number [ 2100.959665][ T5596] FAT-fs (loop1): bogus number of reserved sectors [ 2100.981327][ T5596] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2101.060669][ T5596] FAT-fs (loop1): bogus number of reserved sectors [ 2101.072778][ T5596] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:03 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x4a, 0x0, 0x0, 0x0, 0x0) 06:49:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4001, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000040)={{0x7, 0x7, 0x89, 0x7, 0x7, 0xa31}, 0x4}) fcntl$setsig(r0, 0xa, 0x2f) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:49:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, r1}}, 0x30) 06:49:03 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x20000130, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x28040000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2101.847760][ T5714] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2101.847760][ T5714] program syz-executor.0 not setting count and/or reply_len properly [ 2101.849423][ T5712] FAT-fs (loop1): bogus number of reserved sectors [ 2101.881123][ T5712] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}, r1}}, 0x30) 06:49:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:03 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2101.962306][ T5712] FAT-fs (loop1): bogus number of reserved sectors [ 2101.986811][ T5712] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x29040000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2102.016854][ T5811] XFS (loop2): Invalid superblock magic number [ 2102.049778][ T5935] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2102.049778][ T5935] program syz-executor.0 not setting count and/or reply_len properly 06:49:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:03 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) accept4$bt_l2cap(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x800) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x152) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x6800) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000040)={0x4, 0x9, 0x8, 0x863b}, 0x10) [ 2102.126545][ T5957] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2102.126545][ T5957] program syz-executor.0 not setting count and/or reply_len properly [ 2102.162915][ T5992] FAT-fs (loop1): bogus number of reserved sectors [ 2102.205261][ T5992] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2102.273530][ T5992] FAT-fs (loop1): bogus number of reserved sectors [ 2102.289655][ T5992] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:04 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x4c, 0x0, 0x0, 0x0, 0x0) 06:49:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}}, r1}}, 0x30) 06:49:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:04 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0x1b, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:04 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_matches\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x3c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x9, @remote, 0x5}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e20, 0xfffffffffffffc00, @ipv4={[], [], @local}, 0x3}}}, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0xd) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x8, 0x101}, &(0x7f0000000240)=0x8) 06:49:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x2a040000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2102.833020][ T6165] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2102.833020][ T6165] program syz-executor.0 not setting count and/or reply_len properly 06:49:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2102.917747][ T6171] FAT-fs (loop1): bogus number of reserved sectors [ 2102.939221][ T6208] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2102.939221][ T6208] program syz-executor.0 not setting count and/or reply_len properly [ 2102.972290][ T6171] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:04 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x7) 06:49:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, r1}}, 0x30) [ 2103.037812][ T6244] XFS (loop2): Invalid superblock magic number [ 2103.048653][ T6171] FAT-fs (loop1): bogus number of reserved sectors 06:49:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:04 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000080)={{0x1, @name="2ae76291efb96aa58585d01bec0fa3c7946aa171173ba4b7a9348a983adb7b75"}, "ab5d028fce6749eba3c2a2579b1d9fd20fd7bde053340761f468708893eba9bf", 0x2}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) [ 2103.083739][ T6171] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2103.108593][ T6499] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2103.108593][ T6499] program syz-executor.0 not setting count and/or reply_len properly 06:49:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x2c040000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2103.247260][ T6584] FAT-fs (loop1): bogus number of reserved sectors [ 2103.265348][ T6584] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2103.334588][ T6584] FAT-fs (loop1): bogus number of reserved sectors [ 2103.344156][ T6584] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:05 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x60, 0x0, 0x0, 0x0, 0x0) 06:49:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:05 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}, r1}}, 0x30) 06:49:05 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x20000130) 06:49:05 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x181000) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000480)={r1, 0x1000, "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"}, &(0x7f00000000c0)=0x1008) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 06:49:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x2d040000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:05 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}}, r1}}, 0x30) 06:49:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:05 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x374) r1 = gettid() r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40040, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)=0x0) tgkill(r1, r3, 0x40) [ 2103.579614][ T6844] FAT-fs (loop1): bogus number of reserved sectors [ 2103.613744][ T6745] XFS (loop2): Invalid superblock magic number [ 2103.621344][ T6844] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:05 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, r1}}, 0x30) 06:49:05 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080)=0x7, 0x4) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x6) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0x2, 0x0) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x7fff, 0x80800) [ 2103.703048][ T6844] FAT-fs (loop1): bogus number of reserved sectors [ 2103.730694][ T6844] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:06 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x68, 0x0, 0x0, 0x0, 0x0) 06:49:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x2e040000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}, r1}}, 0x30) 06:49:06 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x2000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000200)={'icmp\x00'}, &(0x7f0000000240)=0x1e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3ff, 0x4000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000000c0)={r3, &(0x7f0000000140)=""/71}) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000100)={0x2, 0xfffffc59, 0xfa00, {0x0, {0xa, 0x4e21, 0x5, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:06 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x40, 0x5, 0x4, 0x5}, 'syz1\x00', 0x4c}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000380)={0xffffffffffffffff}, 0x113, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 06:49:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2104.437775][ T7191] FAT-fs (loop1): bogus number of reserved sectors [ 2104.444500][ T7191] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}}, r1}}, 0x30) 06:49:06 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) accept4$nfc_llcp(r1, &(0x7f0000000140), &(0x7f00000001c0)=0xffffffffffffff2f, 0x800) r2 = dup(r0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01000100b27bec7d0a4938206a121678ca3eaa5baaaaaa98aaaa1d5aef"]) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000000)={0x1, 0x4, 0xa5}) 06:49:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, r1}}, 0x30) [ 2104.549270][ T7191] FAT-fs (loop1): bogus number of reserved sectors [ 2104.572328][ T7191] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x2f040000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2104.672887][ T7433] sg_write: 5 callbacks suppressed [ 2104.672898][ T7433] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2104.672898][ T7433] program syz-executor.0 not setting count and/or reply_len properly [ 2104.699229][ T7291] XFS (loop2): Invalid superblock magic number [ 2104.726483][ T7439] FAT-fs (loop1): bogus number of reserved sectors [ 2104.745837][ T7439] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2104.824841][ T7439] FAT-fs (loop1): bogus number of reserved sectors [ 2104.842449][ T7439] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:07 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x6c, 0x0, 0x0, 0x0, 0x0) 06:49:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x111, 0x200}}, 0x20) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:49:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}, r1}}, 0x30) 06:49:07 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x2, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x30040000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2105.477726][ T7568] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2105.477726][ T7568] program syz-executor.0 not setting count and/or reply_len properly [ 2105.545537][ T7570] FAT-fs (loop1): bogus number of reserved sectors [ 2105.558246][ T7614] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2105.558246][ T7614] program syz-executor.0 not setting count and/or reply_len properly [ 2105.589161][ T7570] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}}, r1}}, 0x30) 06:49:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, r1}}, 0x30) 06:49:07 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x13, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@null, @rose, @remote, @remote, @rose, @null, @remote, @default]}, &(0x7f00000000c0)=0x48) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x3, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000200)="f16915fcd8ec74aa19fb32826712de2fd72b14f92d3be078bf032f5b571ae79f19ecc613119785436c39943361cfc0ebc40f75424c54038ac9abcc5e6eec09c3a7fa28029ed765782a645ec8bad629c95f24b3d0c6b06676d5b70bb88601b8b9fea685f07eaee323844e5a28d9db13519be706ece292dfaa", 0x78, 0x2a}, {&(0x7f0000000280)="55eaa4d585b03de1c19a2a69d23e09cae76c2d894718e36decb53c8663c3ef7bd0b1b3955b5ada2905116c63624141c0c512253cf792b754aac700b0deb129c543800a5451b6e91a336ab4fd6682a561fac0db287141ce5e5be66a35e3dbb8a32e0b09dfc1812511cc1255f126bc9500d00036357709ca642961f9132b976b8dfb9c82bd24da6b3c487d61b788ea42f1292dd5f03d62b043fb809dab952e1d09ea1fa624122d4ef30b64b76f6964177ea9ac5cf91b655f8aac9b94d8156fa6586e004bb4ac6a3fe2c8954b4cb664cec034", 0xd1, 0x8c}, {&(0x7f0000000380), 0x0, 0xfef}], 0x8, &(0x7f0000000580)={[{@errors_continue='errors=continue'}, {@errors_remount='errors=remount-ro'}, {@errors_recover='errors=recover'}, {@errors_remount='errors=remount-ro'}, {@utf8='utf8'}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@dont_appraise='dont_appraise'}, {@appraise='appraise'}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/infiniband/rdma_cm\x00'}}, {@appraise='appraise'}, {@audit='audit'}, {@euid_eq={'euid', 0x3d, r2}}, {@obj_user={'obj_user', 0x3d, '{vboxnet1nodev{loeth0cgroup'}}]}) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000140)={'greta\x00\x13\x00\x00\x00\xf9\x00', 0x2}) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2105.691320][ T7660] XFS (loop2): Invalid superblock magic number [ 2105.697946][ T7570] FAT-fs (loop1): bogus number of reserved sectors [ 2105.698852][ T7812] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2105.698852][ T7812] program syz-executor.0 not setting count and/or reply_len properly [ 2105.704448][ T7570] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) accept$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14) sendmsg$xdp(r1, &(0x7f0000000a40)={&(0x7f00000004c0)={0x2c, 0x3, r2, 0x34}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000500)="948bdacc775097589325c361b4b120e69df0ccb96595b46d387481cf0a6758629c3369885efb3c9ef46a390414f069366d9f7128dadd3508531d45b2480b8e7e7fe318221b4de5a6fac9d9730fc57b84bddc4c873957c31e2f658d532479105a7a6dc0e2e77289ce911dad700f7476d014553407c76a9794dcad9a790b9cc0ffedacba5aa2f4475cff949b8998fc5f123fd314c7b9f77239e52e0bf6bb0f041cf24acd648996d9ce6160a63233cd15518d192432fd8a004946786b57e4ccbad5ceb102154513ddbe56f951ff52c69994fee59971afe51c33daf9615f0afdb37667bf2c104b51eeac5d694f4863bcf05330", 0xf1}, {&(0x7f0000000600)="b9e9768aad57d348ad1f7abe35661ecef6defc86d918a082bd640c6882a0c46dfcd56a41aaf3e96fdf2c1e2a4007240403a7c6f25d744042ef629742c6109e363548a37decb0a0547cd6eba669efd3f747bc4c9c5b00169679d5c751dd76be0ad80206faf0af32e0b6ee3a719be8211de4cc83abe01abd80e33e9d215d9196f5fc1b8a9f2847e9fe309f2bcceb17bc662ca1d02f19d4867371365fef22c71592bf2b002140540dacff1db8599e94ffd191e1862538bd422f9f996addecc87e029a8d453ecb", 0xc5}, {&(0x7f0000000700)="a0d9fdcc6e0f0c5633f05ab90f4262b5ef8794ebb9c3ea0faba45c4cfe68ffdfb1f8be599b072f1d9b1433ebf99d5907c460729d8458ca7478372117ec89bf2e1a320be16a4b0ac98fd281", 0x4b}, {&(0x7f0000000780)="3b648bb073a6a9555112aee18f479fbe69c6850575837c1ee8c613c97b4b95e91c3b56b898cbcda811e08c30346bec619da1a51ada2729154396f7e445afc5e555796fa06f108451be2d85097c03c9fad9d63079c75bddb742365b6f5a9a1fb410e691d7d4d76267a287b3993abc1f61e9c8e83ca13a54c719f4f038ba7e0a624cfeee99d5986b5c3f974461aa234d5e87ce7effb5ded2", 0x97}, {&(0x7f0000000840)="e0a4d1fbeb19c81c727ba27636eb1c382955ffb58bc51066a9aff3e44aadaa6675235bd75c781d21c017aa1122a217d4", 0x30}, {&(0x7f0000000880)="3666aabb6d52b0878297741e8d03f2005ce099f298db100bfe2db0cee8140d4e181a05941417c97d64e751bc530b5106837893bbf3fb2f8499fa8e7d0854901cc7cafaee203145854157ac6a96268c9fe640f0bdbb8d1e997468158f98ab2ffc5544f7482738092fff8afab85d327adc92d53ba9015e956e0a3051dbfc806d6ff206982e02", 0x85}, {&(0x7f0000000940)="a576a31fb50b8190561b6a7c963b3ce14afca2253f0bc5b1058e0823f012af0215df866ba52e798c973060a4d92a7f7f674bf2fe4e3d94b6a72fabb6c8d4da403f883f53865491fd062463f500a4465192549145c233e79ec2ab1dfa7e0b", 0x5e}], 0x7, 0x0, 0x0, 0x40800}, 0x1) sysfs$2(0x2, 0x1ff, &(0x7f00000000c0)=""/106) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000080)={0x4, 0x7fff, 0x2, 0x6, 0x3d53}) [ 2105.762708][ T7812] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2105.762708][ T7812] program syz-executor.0 not setting count and/or reply_len properly [ 2105.833513][ T7840] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 2105.862593][ T7840] ntfs: (device loop5): parse_options(): Unrecognized mount option fsmagic. [ 2105.881052][ T7840] ntfs: (device loop5): parse_options(): Unrecognized mount option dont_appraise. [ 2105.901925][ T7840] ntfs: (device loop5): parse_options(): Unrecognized mount option appraise. [ 2105.924341][ T7840] ntfs: (device loop5): parse_options(): Unrecognized mount option smackfstransmute. 06:49:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x31040000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}, r1}}, 0x30) 06:49:08 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x74, 0x0, 0x0, 0x0, 0x0) 06:49:08 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:08 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp\x00') ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2, {0x9, 0x3ff, 0xac2, 0x76efc728}}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) fcntl$setstatus(r1, 0x4, 0x4000) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 2106.496303][ T8068] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2106.496303][ T8068] program syz-executor.0 not setting count and/or reply_len properly 06:49:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2106.537186][ T8067] FAT-fs (loop1): bogus number of reserved sectors [ 2106.556227][ T8067] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}}, r1}}, 0x30) 06:49:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) process_vm_writev(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/85, 0x55}, {&(0x7f0000000280)=""/106, 0x6a}, {&(0x7f0000000480)=""/192, 0xc0}, {&(0x7f00000003c0)=""/66, 0x42}, {&(0x7f0000000540)=""/179, 0xb3}, {&(0x7f0000000180)=""/8, 0x8}, {&(0x7f0000000600)=""/181, 0xb5}], 0x7, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x201, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000740)={0x0, [0x200, 0x1ff, 0x1, 0x1, 0x8, 0x8, 0x3, 0x2, 0x8, 0x6, 0x9, 0x4, 0x59, 0x6, 0x3, 0xffffffffffffffff, 0x7, 0x6, 0x100000001, 0x80000001, 0x7, 0x7, 0x3, 0x10000, 0x5, 0x5, 0x9, 0xfc00000000000000, 0x7, 0x9, 0xff, 0x8001, 0x7ff, 0xff, 0x7ff, 0x58, 0x2, 0x8000, 0x2, 0x9, 0xb1, 0x1, 0xffffffffffffff8d, 0x5, 0x81, 0xc1, 0x8981, 0xfff]}) 06:49:08 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x13f}}, 0xfffffffffffffe39) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x17, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x145, 0x100a}}, 0x20) r2 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x20, 0x12002) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x2a0, 0xfa00, {0x0, {0xa, 0x4e21, 0x5, @mcast1, 0x9}, r1}}, 0x418) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)={0x400}) [ 2106.650246][ T8067] FAT-fs (loop1): bogus number of reserved sectors [ 2106.661456][ T8074] XFS (loop2): Invalid superblock magic number [ 2106.673707][ T8067] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2106.680906][ T8292] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2106.680906][ T8292] program syz-executor.0 not setting count and/or reply_len properly 06:49:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x3e260000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, r1}}, 0x30) [ 2106.798431][ T8377] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2106.798431][ T8377] program syz-executor.0 not setting count and/or reply_len properly 06:49:08 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x20, 0xfa00, {0x0, {0xa, 0x4e23, 0x5, @ipv4={[], [], @empty}, 0x3}, r1}}, 0x30) 06:49:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2106.873152][ T8464] FAT-fs (loop1): bogus number of reserved sectors [ 2106.921489][ T8464] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2106.981175][ T8564] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2106.981175][ T8564] program syz-executor.0 not setting count and/or reply_len properly [ 2107.005029][ T8564] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2107.005029][ T8564] program syz-executor.0 not setting count and/or reply_len properly 06:49:09 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x7a, 0x0, 0x0, 0x0, 0x0) 06:49:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0x4, 0xc9, 0x4, 0x8, 0x2, [{0x2, 0x8, 0x3f, 0x0, 0x0, 0x200}, {0xffffffff, 0x1, 0x79, 0x0, 0x0, 0x81}]}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:49:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}, r1}}, 0x30) 06:49:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:09 executing program 5: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x2, 0x400401) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x0, 0x0, 0x1, 0x4}}) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x0) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1100}}, 0x20) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f00000009c0)=""/4096) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:09 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x3f000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}}, r1}}, 0x30) [ 2107.541488][ T8635] FAT-fs (loop1): bogus number of reserved sectors [ 2107.564262][ T8635] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2107.614710][ T8635] FAT-fs (loop1): bogus number of reserved sectors [ 2107.653338][ T8635] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:09 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x800000000000106, 0x1005}}, 0x95) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @mcast1, 0x9}}}, 0x30) 06:49:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:09 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x40000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2107.753388][ T8707] XFS (loop2): Invalid superblock magic number [ 2107.869350][ T8940] FAT-fs (loop1): bogus number of reserved sectors [ 2107.880994][ T8940] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2107.939523][ T8940] FAT-fs (loop1): bogus number of reserved sectors [ 2107.952089][ T8940] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:10 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xc0, 0x0, 0x0, 0x0, 0x0) 06:49:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, r1}}, 0x30) 06:49:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0xfffffffffffffd27) r2 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@nl=@proc, &(0x7f0000000140)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000003c0)={@loopback, @rand_addr="a77e338f40e968ddd266ab4ae26c82cd", @loopback, 0xe791, 0x100000001, 0x2, 0x0, 0x5, 0x40000, r3}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200000, 0x0) write$capi20(r5, &(0x7f0000000040)={0x10, 0xffff, 0x82, 0x83, 0xffff, 0xc2e}, 0x10) r6 = getgid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x1008000, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d305ba10c11976c1370329d303030bb86043330306cd5e97417a827b934303030", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',max_read=0x000000000000e5b2,max_read=0x0000000000000008,default_permissions,blksize=0x0000000000000400,default_permissions,default_permissions,default_permissions,default_permissions,allow_other,default_permissions,mask=MAY_READ,dont_measure,audit,\x00']) 06:49:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:10 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x48000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}, r1}}, 0x30) [ 2108.626755][ T9003] FAT-fs (loop1): bogus number of reserved sectors [ 2108.664435][ T9003] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:10 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000140)=""/4096, &(0x7f00000000c0)=0x1000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0xffffff55, 0xfa00, {0x0, 0x0, 0x13f, 0x800000000001000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}}, r1}}, 0x30) 06:49:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, '/proc/sys/net/ipv4/vs/cache_bypass\x00'}], 0xa, "3deb0c12249bc1b1553f4eed40ed5c26ebbaf756a6521b5f38ba911803b3287fc312d7e8d7845abbcec8a1395783bd46d5af9a78ee437373148785488af9d8c8962e700f7423a0634d4a2d16004e11e737cc68ba8d87992f6cbaf228a4d67d2e68d6537036e30ee9512d5384e7ab70b40bb6282bba59d265448c53174d757ba2c2239ea46a5b796a812280a6559f310c3260a55c15371aa5eb4e7e4c10e791737e5a56ce6e536ebb5e76f02049b877f56ef58542e78d64a9dc1935488d3eca4e98c7680d18b7709f832aa4eabf626fa45e713b2d01c8"}, 0x105) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000180)={r2, 0x3}) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000003c0)={0x0, 0xfd, "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"}, &(0x7f0000000500)=0x105) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000540)={r4, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) r5 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x92, 0x800) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x9b, 0x9, 0x1002, 0x5, 0xa, 0x4, 0x1, 0x3}}) [ 2108.748489][ T9003] FAT-fs (loop1): bogus number of reserved sectors [ 2108.756128][ T9003] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2108.787671][ T9101] XFS (loop2): Invalid superblock magic number 06:49:11 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xc4, 0x0, 0x0, 0x0, 0x0) 06:49:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x4c000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:11 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, r1}}, 0x30) 06:49:11 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}, r1}}, 0x30) 06:49:11 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r0}}, 0x10) 06:49:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:11 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000040)={0x3, 0x1}) [ 2109.696376][ T9468] FAT-fs (loop1): bogus number of reserved sectors [ 2109.722781][ T9468] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2109.728318][ T9517] sg_write: 10 callbacks suppressed [ 2109.728328][ T9517] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; 06:49:11 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}, r1}}, 0x30) [ 2109.728328][ T9517] program syz-executor.0 not setting count and/or reply_len properly 06:49:11 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xc80, 0x0) ioctl$VT_RELDISP(r1, 0x5605) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2109.808777][ T9468] FAT-fs (loop1): bogus number of reserved sectors [ 2109.822671][ T9468] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2109.845242][ T9507] XFS (loop2): Invalid superblock magic number 06:49:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2109.886333][ T9700] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2109.886333][ T9700] program syz-executor.0 not setting count and/or reply_len properly [ 2109.962754][ T9724] FAT-fs (loop1): bogus number of reserved sectors [ 2109.980926][ T9724] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2110.046072][ T9724] FAT-fs (loop1): bogus number of reserved sectors [ 2110.052746][ T9724] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:12 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xda, 0x0, 0x0, 0x0, 0x0) 06:49:12 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}}, r1}}, 0x30) 06:49:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40000, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 06:49:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:12 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:12 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x68000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2110.701357][ T9826] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2110.701357][ T9826] program syz-executor.0 not setting count and/or reply_len properly 06:49:12 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x223}}, r1}}, 0x30) [ 2110.795183][ T9829] FAT-fs (loop1): bogus number of reserved sectors [ 2110.821880][ T9829] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:12 executing program 5: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200000, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x7fff, 0x8000) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040)=0x230, 0x4) [ 2110.842557][ T9963] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2110.842557][ T9963] program syz-executor.0 not setting count and/or reply_len properly [ 2110.883181][ T9829] FAT-fs (loop1): bogus number of reserved sectors 06:49:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:12 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x300}}, r1}}, 0x30) [ 2110.909109][ T9928] XFS (loop2): Invalid superblock magic number [ 2110.928408][ T9829] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0xffffffffffffffd8, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 2111.003229][T10065] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2111.003229][T10065] program syz-executor.0 not setting count and/or reply_len properly 06:49:13 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xec, 0x0, 0x0, 0x0, 0x0) 06:49:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x6c000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:13 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x8}, r1}}, 0x30) 06:49:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0xbfffffff, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:13 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x400) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000040)={0x2}) 06:49:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x2c0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000240)={0x80000001, 0xfffffffffffffffd, 0xff, @remote, 'sit0\x00'}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80400, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000100)="b6a708611d31759f6fa8380a9a668ac0c74791d3bac18366bdf9bd0cdfe5f0680db93d9c0f599a310ae27cd7ea2d1ae85bbaa7e4b09b61586409a99e910517ce60fc0fe7f43220287dee9428f5aad721072f43") write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) openat$md(0xffffffffffffff9c, &(0x7f0000000300)='/dev/md0\x00', 0x8bffd, 0x0) [ 2111.705830][T10286] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2111.705830][T10286] program syz-executor.0 not setting count and/or reply_len properly [ 2111.777036][T10291] FAT-fs (loop1): bogus number of reserved sectors 06:49:13 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x8000000}, r1}}, 0x30) 06:49:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2111.818666][T10291] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:13 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x9, 0x109000) write$tun(r1, &(0x7f0000000280)={@val={0x0, 0xdbdf}, @void, @llc={@snap={0x1, 0x1, "6898", "e18a0e", 0x8808, "65cf5ce341e42fb2486a8672f469092ec93ce1b3f0e733eb86e3dfb208056219b76a419fcedddda63dc69eee2bcacfcc151bca3cd7506c4b9193fa1db5160c019aa3fd1e30f9f2d337605a7aca10c47c4b44d447d9f8d6e8e784690dc15ae21cfc8558c648101dde823fce1025375b07fe8062a6579e3e3c59ce5ae9650ecba65a4f9722cc1992c7baef8916bb345578a876653157f83d0dbed4a550a255173f09fd808e58b000ce2a1003b2eb6864bcad5272de88a346b25e2e6b8f8eb7486d23ef1ae2f7a413f1"}}}, 0xd5) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000140)={0x4, {{0xa, 0x4e23, 0x79c, @mcast1, 0x4}}, {{0xa, 0x4e23, 0x20, @mcast1, 0x9}}}, 0x108) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x1, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:13 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x800000000000000}, r1}}, 0x30) [ 2111.884315][T10291] FAT-fs (loop1): bogus number of reserved sectors [ 2111.897224][T10291] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2111.934495][T10423] XFS (loop2): Invalid superblock magic number [ 2111.941930][T10513] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2111.941930][T10513] program syz-executor.0 not setting count and/or reply_len properly 06:49:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) prctl$PR_SVE_SET_VL(0x32, 0xe72f) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:49:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x74000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2112.109780][T10638] FAT-fs (loop1): bogus number of reserved sectors [ 2112.121004][T10638] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2112.175595][T10638] FAT-fs (loop1): bogus number of reserved sectors [ 2112.190865][T10638] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:14 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x7) 06:49:14 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:14 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xf2, 0x0, 0x0, 0x0, 0x0) 06:49:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0xfffffffffffffe19, 0xfa00, {r2, 0x583}}, 0xfea7) 06:49:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x78260000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2112.765306][T10763] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2112.765306][T10763] program syz-executor.0 not setting count and/or reply_len properly 06:49:14 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x20000030) [ 2112.813899][T10753] FAT-fs (loop1): bogus number of reserved sectors [ 2112.846190][T10753] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2112.878612][T10906] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2112.878612][T10906] program syz-executor.0 not setting count and/or reply_len properly 06:49:14 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f00000000000000007a008128b14700000000d59863d20000020002000f2020cc0000000094c08a6e00ffffffee000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xc000, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) 06:49:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:14 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000764addfbe946eb5c12df257cbc7c067f544f72f1c9c740b0533f4a5424521552feac1ce7c3deed1512a182653e03d6512c46229046f8abad7fde5973b66c0d8a57f9e7ba976a13451cd4f1b1b710d94f9dd84b0cec59f97e17568373ba73a126bebef8e0c066f03bcba55bf0777b9a56b75ddb829824b60d26d13a27b24d325780842d524c34f04b10bad99f7de04bae4de939a9b25784b94e7a084b47c12bd78ee6c6aaf8e6f7a388246c03d9925173bda3681a0f19d7eaf8c5127dac1d26ebef7e78077033f107bd17ce1c49c454a65c23e2cdbf00000000000000000000", @ANYRES16=r2, @ANYBLOB="00002bbd7000fbdbdf2501000000000000000741000000140018000000017564703a73797a3100000000"], 0x30}, 0x1, 0x0, 0x0, 0x24040840}, 0x10) [ 2112.932729][T10753] FAT-fs (loop1): bogus number of reserved sectors [ 2112.951932][T10753] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:14 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0xb) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) [ 2113.026597][T10875] XFS (loop2): Invalid superblock magic number 06:49:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x79260000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2113.069582][T11027] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2113.069582][T11027] program syz-executor.0 not setting count and/or reply_len properly 06:49:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2113.114701][T10982] Dev loop4: unable to read RDB block 1 [ 2113.123708][T11076] FAT-fs (loop1): bogus number of reserved sectors [ 2113.149969][T11076] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2113.166086][T10982] loop4: unable to read partition table [ 2113.172395][T10982] loop4: partition table beyond EOD, truncated [ 2113.202017][T10982] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) 06:49:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2113.219689][T11076] FAT-fs (loop1): bogus number of reserved sectors [ 2113.232500][T11076] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:15 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x134, 0x0, 0x0, 0x0, 0x0) 06:49:15 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) socket$alg(0x26, 0x5, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:15 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x4001, 0x0) connect$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x1, 0x7, 0x55, 0x1000, "74e1895cb8bd9e94a90ed36ee15806358d0067a5bb895a4bb452f1675918dcd6afa698b3f805500ca71cdb1a949b1301b1b5ed4a1a1b22a15c5cd4e01daa10", 0x37}, 0x60) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0xed) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x111, 0xa}}, 0x20) r2 = dup(r0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000140)=""/69, 0x120000, 0x0, 0x1}, 0x18) 06:49:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:15 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0xffffffffffffffa2, 0xfa00, {r1}}, 0x10) 06:49:15 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x7a000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2113.868462][T11227] FAT-fs (loop1): bogus number of reserved sectors [ 2113.882661][T11227] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2113.958143][T11227] FAT-fs (loop1): bogus number of reserved sectors [ 2113.986297][T11227] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:15 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) eventfd(0xfffffffffffffffb) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x2, 0x4) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000240)={0x8, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}}}, 0x108) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x54000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1a0000001401549fe391a310263d28b383fb69147d46d373f6a891710bdfdad64e", @ANYRES16=r2, @ANYBLOB="00032cbd7000fedbdf2503000000080001004e240000"], 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x4040) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:15 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r3, 0x9}, 0x8) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0xfffffffffffffdb0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) [ 2114.029682][T11310] XFS (loop2): Invalid superblock magic number 06:49:15 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:16 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x111}}, 0x20) [ 2114.200502][T11645] FAT-fs (loop1): bogus number of reserved sectors [ 2114.221430][T11645] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2114.306935][T11645] FAT-fs (loop1): bogus number of reserved sectors [ 2114.314253][T11645] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:16 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x140, 0x0, 0x0, 0x0, 0x0) 06:49:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:16 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffff, 0x2202) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x4, 0x2, 0x81}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r1, 0x37, 0x8000000000001, 0x4}, &(0x7f00000000c0)=0x238) prctl$PR_SET_PDEATHSIG(0x1, 0xc) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r2, 0x6, 0xa, [0x1, 0x7, 0x0, 0x8000, 0x5, 0x0, 0x0, 0xb2b, 0xa1f, 0x6]}, 0x1c) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_extract_tcp_res(&(0x7f0000000200), 0xfffffffffffffffc, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xffd}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0xfffffffffffffffc}}}, 0x30) 06:49:16 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) r2 = accept(0xffffffffffffff9c, &(0x7f0000000080)=@hci, &(0x7f0000000100)=0x80) recvfrom$llc(r2, &(0x7f0000000480)=""/4096, 0x1000, 0x0, &(0x7f0000000140)={0x1a, 0x33f, 0x9, 0x58, 0xa64, 0x800, @broadcast}, 0x10) 06:49:16 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x4000) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f00000000c0)=0x7, 0x4) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'security.', '\x00'}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:49:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xb4000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2114.839663][T11684] sg_write: 7 callbacks suppressed [ 2114.839676][T11684] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2114.839676][T11684] program syz-executor.0 not setting count and/or reply_len properly [ 2114.876178][T11691] FAT-fs (loop1): bogus number of reserved sectors [ 2114.883982][T11691] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:16 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80080, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000100)=0x6) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x3, 0x6, 0x8001, 0x4}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) [ 2114.977453][T11691] FAT-fs (loop1): bogus number of reserved sectors [ 2115.001818][T11691] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2115.014015][T11906] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; 06:49:16 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) r1 = getpid() syz_open_procfs(r1, &(0x7f0000000000)='net/udp6\x00') 06:49:16 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) r1 = pkey_alloc(0x0, 0x8000000000003) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000080)=0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r0}}, 0x10) [ 2115.014015][T11906] program syz-executor.0 not setting count and/or reply_len properly 06:49:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed0000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2115.096453][T11791] XFS (loop2): Invalid superblock magic number [ 2115.190118][T12049] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2115.190118][T12049] program syz-executor.0 not setting count and/or reply_len properly [ 2115.208123][T12039] FAT-fs (loop1): bogus number of reserved sectors [ 2115.225203][T12039] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2115.264353][T12039] FAT-fs (loop1): bogus number of reserved sectors [ 2115.273576][T12039] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:17 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x148, 0x0, 0x0, 0x0, 0x0) 06:49:17 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x2000000000, 0x2) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x99f) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x4, 0x404003) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x8001, 0xfffffffffffffffd, 0x1, 0x0, 0xb2e0, 0x5, 0x2, {0x0, @in6={{0xa, 0x4e21, 0x80, @empty, 0x3}}, 0x0, 0x4, 0xffff, 0x5, 0x6}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={r4, @in={{0x2, 0x4e20, @local}}, 0x401, 0xd2c, 0x6, 0x1, 0x40}, 0x98) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x30) 06:49:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:17 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @rand_addr="cc252e61d93d5add0e0adb25aca016d6", 0x7a}}}, 0x30) 06:49:17 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x400000, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000180)={0x0, 0x6, 0x7, [], &(0x7f0000000140)={0x9909fe, 0x800, [], @value64=0x5}}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x4, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, r1, 0x30, 0x1, @in6={0xa, 0x4e23, 0x1000, @mcast1, 0x4}}}, 0xa0) 06:49:17 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xf1250000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2115.858909][T12144] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2115.858909][T12144] program syz-executor.0 not setting count and/or reply_len properly 06:49:17 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40080, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000080)=""/132) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x30) [ 2115.929892][T12149] FAT-fs (loop1): bogus number of reserved sectors [ 2115.948956][T12149] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2115.970856][T12254] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2115.970856][T12254] program syz-executor.0 not setting count and/or reply_len properly [ 2116.010001][T12254] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2116.010001][T12254] program syz-executor.0 not setting count and/or reply_len properly 06:49:17 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x109, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x113, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xfffffffffffffe01, @remote, 0x9b9}, r1}}, 0x1ce) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0x0) r2 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x8, {0x7, 0x1d, 0x5, 0x20, 0x7c4d, 0x9, 0x9, 0x401}}, 0x50) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x8001, 0x4) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000001c0)={0x50, 0x0, 0x7, {0x7, 0x1d, 0x1, 0x14, 0xffffffff, 0x10000, 0x2, 0xffffffff}}, 0x50) [ 2116.038036][T12149] FAT-fs (loop1): bogus number of reserved sectors [ 2116.052213][T12149] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:18 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xf4ffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:18 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x15a, 0xfa00, {r1}}, 0xffffffffffffff48) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000080)) [ 2116.113142][T12165] XFS (loop2): Invalid superblock magic number [ 2116.194395][T12458] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2116.194395][T12458] program syz-executor.0 not setting count and/or reply_len properly [ 2116.219426][T12462] FAT-fs (loop1): bogus number of reserved sectors [ 2116.234190][T12462] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2116.304947][T12462] FAT-fs (loop1): bogus number of reserved sectors [ 2116.313795][T12462] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:18 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x174, 0x0, 0x0, 0x0, 0x0) 06:49:18 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x117, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 06:49:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:18 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffeb8, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x7, @remote, 0x9}}}, 0x30) 06:49:18 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:18 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xf5ffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2116.953939][T12521] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2116.953939][T12521] program syz-executor.0 not setting count and/or reply_len properly 06:49:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2116.998351][T12525] FAT-fs (loop1): bogus number of reserved sectors [ 2117.004862][T12525] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2117.084542][T12525] FAT-fs (loop1): bogus number of reserved sectors [ 2117.106652][T12525] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2117.118797][T12773] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2117.118797][T12773] program syz-executor.0 not setting count and/or reply_len properly 06:49:19 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getuid() syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x100000000, 0x6, &(0x7f0000000540)=[{&(0x7f0000000140)="40018d6444c7ee45549c7627a4ff5391fe23eb56da724d4c1faea031c2e776205eab50a437e6e9a71bbee1868d04391dd275b3b8c706adf70df4ca8430d6f8f786567acf1fdc6a01df47558ab674b67486d02d83efef4e7c701243d1ff273df4197dc2cabc89eabf4f17bf439724d028774d2b028e3b607b16ddc9375ea3048c6dfb1de18ae6f4fda3eb1d0885b15416e65d25c92e116e16f10b926aaa2a5142dbe8830b3e291bc97d8473d1861397e4af18eb608707a327c972873298869a52239bbe949105b535a91f40773c1b1e227b795ca3b43502859f6a20aad36a3d0aa5bbcb4a7dbbdf996567eb303982511f9b", 0xf1, 0x5}, {&(0x7f0000000240)="7d112a6724617b0d3be2e90553e355d258901a10289b43de0995c48e77fbabd306ce8300811e088962b25bfb9ca9ad9f2dce3c35e655aa10ecbed777a0baaf6ebe5d4f5a0b145faa61e9c76b36ff90fb548fa75e4ffff9c1c6e821c5b93eab9105bc40c1fa516baa6191be6bccf200f40287ca7cafa8c59fae6742066c75169b23ba33e6524453eacb424eb240049df1bfe6ba03ea4cc4b92db105d67e6797da79f046b4afef5cfe97c9363e9823dac23718e21a2f80cf234a328294f8ce0ea61a1690c83fbf4f2849119373e5b5cdc37e5c0faba3a1361cea270c7bb7a0298b56c248b827e3fcc470566048", 0xec, 0x4}, {&(0x7f0000000340)="abd74d4befcc12ff94eaa69e0bbb2de46773d24d4ea4c24ffb5f5ce8da5fa011f68100ba4973bd6bdad7ad7a5d94e431fb5ff09f24447bcbefba4cd96c01da46055ebe79747e4694d66203ee9f09dabede84ab530c07c57c85c5e95d729edfaa6a03", 0x62, 0x1}, {&(0x7f00000003c0)="17fafb1792e4ff84d6e0f03ac2534c668da783ff2d7ce4e5c14de26acd4de799dd1a3e1fa2a3b98c6425c9244aff0c79ec561d32590540c1ea8b6126607efb16b8edfcabe58a6bebdae2444a10a88124b2e8687721ce7bfc296563e2cfc44d262de69f4ad47be9e1", 0x68, 0x6}, {&(0x7f0000000440)="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", 0xfc, 0x400}, {&(0x7f00000009c0)="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", 0x1000, 0x8}], 0x20042, &(0x7f0000000680)={[{@unhide='unhide'}, {@check_relaxed='check=relaxed'}, {@uid={'uid', 0x3d, r1}}, {@map_off='map=off'}, {@sbsector={'sbsector', 0x3d, 0x65f}}], [{@obj_type={'obj_type', 0x3d, '\\'}}, {@subj_role={'subj_role', 0x3d, '/dev/infiniband/rdma_cm\x00'}}, {@seclabel='seclabel'}, {@uid_lt={'uid<', r2}}, {@subj_role={'subj_role'}}, {@context={'context', 0x3d, 'staff_u'}}]}) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:19 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x143, 0xb}}, 0xfffffffffffffee6) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:19 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe0f, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x111, 0x400000000000}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x12a02010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) 06:49:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2117.212822][T12565] XFS (loop2): Invalid superblock magic number [ 2117.226174][T12773] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2117.226174][T12773] program syz-executor.0 not setting count and/or reply_len properly 06:49:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2117.388859][T12965] FAT-fs (loop1): bogus number of reserved sectors [ 2117.395619][T12965] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2117.483212][T12965] FAT-fs (loop1): bogus number of reserved sectors [ 2117.496864][T12965] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:19 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x9}, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) pipe(&(0x7f00000000c0)) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:19 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000200)={0x7f, 0x6, 0x2, 0xee, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]}) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:19 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x180, 0x0, 0x0, 0x0, 0x0) 06:49:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0xbfffffff00000000, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:19 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000002c0)={0x0, 0x27, 0x5, 0x5, 0x4, 0x200}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x13cf6951c685d602) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000040)={0x0, 0x9, 0x3015, 0x1}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000080)={0x15, 0x110, 0xfa00, {r1, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x3, 0x1, {"6b08688d4c3412a3a517680ef9d8c302"}, 0x7, 0x81, 0x8}, @in6={0xa, 0x4e21, 0x1000, @remote, 0x5}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f0000000480)={0x81, 0x1, 0x6, "ce704d5dcf2058decf834de0589c343815962fdbc3c9584b9e19a61a84d8506f5340d7352dfee3143e1be33f1f1c582ba3270c5a76d587a789fa7c82", 0x19, "e90a1b7f94f647ec42bc3fb1f3d671a7f628299a20c1e5c73e4845a7f415409478727048871a7c9218e949ba7b59f428903d80d7bd0684ee5f144b7f", 0x80}) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) connect$llc(r2, &(0x7f0000000200)={0x1a, 0x201, 0xfffffffffffffffe, 0x4, 0x5, 0x72f0, @local}, 0x10) 06:49:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xf9fdffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2118.054842][T13087] FAT-fs (loop1): bogus number of reserved sectors [ 2118.066906][T13087] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:19 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f00000002c0)={'syzkaller1\x00', 0x401}) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x468000) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000080)=""/211) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x383) [ 2118.138782][T13087] FAT-fs (loop1): bogus number of reserved sectors [ 2118.159198][T13087] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:20 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xfbffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:20 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000040)={0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x100, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r1, 0x80000, r2}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:20 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r1, 0x7}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x30) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x1, 0xa75, 0x1, 0x80, 0x0, 0x1, 0x80, 0x0, 0xfffffffffffffff7, 0x8, 0x8, 0x10001, 0x34, 0x4, 0x0, 0x6, 0x8, 0x5, 0x8, 0x401, 0x37, 0x401, 0x1e81, 0xfffffffffffffc01, 0x5, 0x7, 0xfffffffffffffa73, 0x8, 0x1f, 0x2, 0x4, 0x3ff, 0x20, 0x40, 0x2, 0x1000, 0x0, 0x100000001, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x8}, 0x1009a, 0xfff, 0x1ff, 0x7, 0x5, 0x6, 0x3}, r3, 0x4, 0xffffffffffffffff, 0x4) 06:49:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:49:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2118.300291][T13315] FAT-fs (loop1): bogus number of reserved sectors [ 2118.308332][T13175] XFS (loop2): Invalid superblock magic number [ 2118.333174][T13315] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2118.400391][T13315] FAT-fs (loop1): bogus number of reserved sectors [ 2118.422136][T13315] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:20 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x1c0, 0x0, 0x0, 0x0, 0x0) 06:49:20 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) write$selinux_attr(r1, &(0x7f0000000080)='system_u:object_r:udev_tbl_t:s0\x00', 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f00000000c0)={0x1, 0x7}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0xffffffffffffff53, 0xfa00, {r2}}, 0xfffffffffffffffe) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0xfffffffffffffdb3, 0xfa00, {0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, r2}}, 0x30) fcntl$getflags(r0, 0x3) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140), 0x2) 06:49:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:20 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xfcfdffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:20 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x400000, 0x0) r2 = openat(r1, &(0x7f0000000200)='./file0\x00', 0x1, 0x27) bind$nfc_llcp(r2, &(0x7f00000002c0)={0x27, 0x0, 0x2, 0x5, 0x41, 0x6, "bc412a19cb708d4c3644ab216fff24455b03b9c64987eea88db35e9760bbd4f53805407b8a5caaa1f1e552eeb82c63b02e6028ebac10d7cde211172e6a41d6", 0x13}, 0x60) r3 = fcntl$dupfd(r0, 0x0, r0) renameat(r3, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000280)={r4, @broadcast, @loopback}, 0xc) ioctl$TUNSETLINK(r3, 0x400454cd, 0x104) renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00') write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) lseek(r0, 0x0, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f00000000c0)={[{0x1ff, 0x5, 0x30, 0x3ff, 0x6, 0x2, 0xe55, 0x40, 0x1, 0xa35, 0xa, 0xffe, 0x93d9}, {0x3962, 0x100000000, 0x6, 0xffff, 0x80000001, 0x20000000000, 0x0, 0x80, 0x9, 0x2, 0x84, 0xd05, 0x1}, {0x4b, 0x0, 0x7, 0x1f, 0x1ff, 0xa930, 0xffffffffffffccdd, 0xa5, 0xfffffffffffffff9, 0x1000, 0x6, 0x1ff}], 0x2}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) flock(r0, 0xa) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) fallocate(r0, 0x8, 0x7, 0x3) 06:49:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2119.188223][T13576] FAT-fs (loop1): bogus number of reserved sectors [ 2119.212066][T13576] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:21 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000180)={@hyper}) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000080)={0x0, 0x9ef, @value}) ioctl$RTC_UIE_ON(r1, 0x7003) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) accept4$nfc_llcp(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x80800) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x30) 06:49:21 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000500)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000540)={r2, 0x1}) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{}, {}]}) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) chroot(&(0x7f0000000580)='./file0\x00') r4 = request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='/dev/cec#\x00', 0xffffffffffffffff) r5 = add_key(&(0x7f0000000200)='ceph\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="95271394fd842a78e4116aa3830176aac51cc53a97fbf497a1de403103e4656116d70aadd40b888cf1678e5e08c0dcbea4cc259c99289f4c734f276c095aafe4ab6cc8124ec632663a4da97fbea033dee6d631f6856b9e39be1958caf8bc353d8d430de9a207", 0x66, 0xfffffffffffffffb) r6 = request_key(&(0x7f0000000300)='.request_key_auth\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='/dev/cec#\x00', 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000003c0)={r4, r5, r6}, &(0x7f0000000400)=""/15, 0xf, &(0x7f0000000480)={&(0x7f0000000440)={'sha256-ssse3\x00'}}) [ 2119.296173][T13576] FAT-fs (loop1): bogus number of reserved sectors [ 2119.325005][T13576] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:21 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xfdfdffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:21 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {r1, 0x3}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 2119.410803][T13681] XFS (loop2): Invalid superblock magic number [ 2119.511301][T13805] FAT-fs (loop1): bogus number of reserved sectors [ 2119.531152][T13805] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2119.619307][T13805] FAT-fs (loop1): bogus number of reserved sectors [ 2119.657335][T13805] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:21 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x218, 0x0, 0x0, 0x0, 0x0) 06:49:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:21 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000140)={0x1, 0x7, 0x5, 0x3, 'syz1\x00', 0x4}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x3fc, 0x0) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@random={'os2.', '/dev/qat_adf_ctl\x00'}, &(0x7f0000000200)='(\x00', 0x2, 0x1) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:21 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) keyctl$set_reqkey_keyring(0xe, 0x4) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040), 0x4) 06:49:21 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @in6={0xa, 0x4e23, 0x8000, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x90) 06:49:21 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xff0f0000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2119.962371][T14154] sg_write: 10 callbacks suppressed [ 2119.962383][T14154] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2119.962383][T14154] program syz-executor.0 not setting count and/or reply_len properly [ 2119.986133][T14146] ucma_write: process 19118 (syz-executor.3) changed security contexts after opening file descriptor, this is not allowed. [ 2120.003914][T14149] FAT-fs (loop1): bogus number of reserved sectors 06:49:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:21 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x4}}, 0x10) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x100000000, 0x400) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') getsockopt$sock_int(r2, 0x1, 0xdee68adc21d74b5d, &(0x7f0000000480), &(0x7f00000004c0)=0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="0036abd7", @ANYRES16=r3, @ANYBLOB="00042970586768dbdf250a0000001c0007000c00030008000000000000000c0004e601000000010000002c0006000800010009000000040002000800010008000000040002000800010008000000080001003f000000100004000c00010073797a30000000002800010014000200080001000c0000000800010018000000100001007564703a73797a31000000000c00070008000200ffffffff0800020004000400280002000400040008000100dd000000040004000400040008000200008000000400040004000400"], 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000814) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f00000003c0)={@host}) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000400)={0x5, 0xb12, 0x2}) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) [ 2120.026362][T14149] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:21 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000340)="f86ac9cd8b056ea7f73ff2248871c01078ab0615686422c15496035bd9f612e70cf81562d2fbe759cdac5b8ba7a04529e233cc95377bf1e1eded772f7217ba60789983a3169dd0bae5c103eea77a48be358107001c2548c09a3b6ca7c155a3bd9a5ab248878a4fb04ec4d92827736f3f89a103166db9c3a0790690148707c1f3c5bcd38041c253868218a70e07044c0720b56276bc52d8410ab295ffd3ce27b6873973ef0d04407f51739ef89a4f5d74464c0b550aa8237a83bdd7ab6468856da68c70d959ab7d4f01a634599033d3278feb18a1b9e4f29a4ab18dff82177c76e02bf9f6447aa92464233ed3b50d7ffaa1af5d42323a00") write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x70200, 0x0) [ 2120.122527][T14149] FAT-fs (loop1): bogus number of reserved sectors [ 2120.135013][T14358] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2120.135013][T14358] program syz-executor.0 not setting count and/or reply_len properly [ 2120.161889][T14149] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2120.169745][T14188] XFS (loop2): Invalid superblock magic number 06:49:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffff9c, 0x40, 0x40000001, r1, &(0x7f0000000040)='./file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 06:49:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffdf9, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2120.264116][T14439] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2120.264116][T14439] program syz-executor.0 not setting count and/or reply_len properly [ 2120.292845][T14439] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2120.292845][T14439] program syz-executor.0 not setting count and/or reply_len properly [ 2120.391764][T14616] FAT-fs (loop1): bogus number of reserved sectors [ 2120.424065][T14616] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2120.494098][T14616] FAT-fs (loop1): bogus number of reserved sectors [ 2120.505919][T14616] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:22 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x260, 0x0, 0x0, 0x0, 0x0) 06:49:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x6}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:22 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x100000001040}}, 0xfffffffffffffdda) r1 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x400, 0x10080) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000380)=0xc) r3 = getegid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000500)=0xe8) write$P9_RSTATu(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="8a0000007d010000000000000000000000000010ffffff15b20000009b0273000000000000002f6465762f696e66696e6962616e642f616e642f72646d615f636d000a002f6465762f72746330000800707070301904004c000000000000000000000000000000000000fcff000000000000004bdcb04d98c7abc6a120b01a0f194f6719bde4bdb7c194a539a65b128bdc6be4e8a36a2655cd106d5f544876cd4f0fc341a6918a4021b17c79", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4], 0x8a) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000003c0)=0x800, 0xfffffffffffffdd6) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f00000000c0)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc0\x00', 0x309880, 0x0) ioctl$SIOCAX25NOUID(r5, 0x89e3, &(0x7f0000000280)=0x1) getsockopt$inet6_dccp_buf(r5, 0x21, 0x8f, &(0x7f0000000140)=""/228, &(0x7f0000000040)=0xe4) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000240)='vegas\x00', 0x6) write$binfmt_elf64(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x8a0) setsockopt$inet6_tcp_buf(r5, 0x6, 0xc, &(0x7f0000002280)="5e0aa577c4c09188c15618febacc5ce6abf010aad119720ea64e829a984644996d2bbeead95cb7a8fd450e827868a95833c6deeffd1cb99added2ae472301dbd4e43ee548a5febed5f76d6df4812d23e876084ab3e37a0e297774d7dd1a31b83498a1d0ece59fdbfdd5bcc2fc3886f55c1e48dec5ef6e90aac2d534d5a80008d62583cc466ea05cf6eb565fed57a77170572298f9e31fad4a8629317bf30b673376f28b0ca6fbce80d2f9dcd2d18ad2a5855464211dbee2b8b8f9ba6d76e6f26eb9c7676ea726846faf3038c821e1a7527d595fba02dd523a5422453a49264bd68bb200ea1c0da2c9df1173417b58fa0948d6e41bf0ed68825afba5f45823fb208621f81783a2e0e0cfe004661aa730ed92a9fddf2b6a17e7639858a16742dd4802e932647a2d457d0a93d2a14e1047a1b742bda10221c51e369eccfd71b2543b2e50f65794dcc085fb61652d7e16fa75f515a5c0e4eff65fbef8a5ee60a0698fa5be0c66e91be23fa3f8655811daa3b38ab01da60a69b0872725aa0fdea3ff78e34d39bf09e763a7d4a26ed9cb7f547d96eae476d8965888d4660ca675be71ea4754c833b1b80fb7adcbc244a9357455e4f10e294bd0907999a2f1fe5aa8e8e55524c8bbcba00524eca6250b3576911d548dea9b01abd76c3f61ff483d3cf6d4e71b79fba5feb5cb2ad6525b5e22b97698aff541d28373f868ab84645146707a89ea468196bd58003574d3dd9890875e76d81db0456ccf3a4cba85220692aea9a8cb5d5484d8e599d5a36209b67eda8a5e4aaf3722200d34a7b4f32a93cca82af614617d444b1c8af69b85c277d2b71006164623abaad6f7cfe777a9c0488cdb105c91e1ca0d6c1bb14ed452b43f1b1880a05b2e0e1a065727dd91e9cc6b61766f796db36174e984d80f4d308a74272be6c24d1b7aa395328a72f981eba75438ac8c338a75977c4fe6325a9dd3a996f7f29218abbdbfd1873c8598dc76517a0d07c5ddf3b927de66265c9f2a855ff5073e33eab81a6c5ac80a217bcd1b4e4cc6a120d4593b5ea2b2c29f5f56ffbebd4df780155d0b43494bf45c425556c566206923ac9c3da10446f2458e55ef33ebf5defe0b6430796610f9efe24ac48aff4125de46c4e6c9cc7e6a7572a713bdf51c02f8855021e70339cc1addab3ff245663c6f24bb44d4f9ec461b066e839dc5f0f1ea30525aacdd7786ac9fdde663034d31fe3dc9c68c8b96d7d45d924101361f851e2bbd4be1e4dfb419f03ba591871e01c314d54b438710fafa7ee00a041d18c92d1a6fd536832023950ccee2deaf558cdd29e1f84b298093ef9077a8d61d595e424d186a6be72b389c20cb3e4d394ca60ef8f1c7afef857f91edbaa71a1504bd256bd86d79aef59bd05c7dde84c8e84477e2f4af7e142f7a68fb473c7fbbe3a185a7bcef83e78728cf35d5056198f492bfb3c7051b0af717b690fb8adb2b4b21774cf87cde1a9df9f433d90ed829411aa7a9d71435ae52b71efb17b165a853df10694870be360be069cdafe40a82ec277ce42b5ee7a22e001e663bdde978de1631a1073ec8cd5297ca7f67b4f4084fdb486bc70fa2bd02ec5a8a286e7dc17a155fbe732695c6c8415d065434efbadeeae272b096317bca731623a6aa701bd568a10a470558783ec5ee1512aca23f033d2a9a6ebaf1c189cba95784a1a9fea57bd2f0d58ccf32f9781b8960b025b13da5e0241715d687a87a1ceed4fa4955c9ecf12cf71bddf70763118baa161890847e2ad8dd4d470e8704e900d6e1f5b0afba81936d9844a09ea263fad6ee90b8586fd5101d446bd3cdb9735d098e9c698b96ab6b6176e692477ca083075d04d82310ff7b06204b4430fa992ec92903df6775055fb4336f0db87422ec16560e2c4984a369a4a71370f89b3fb0bd6ea1488a6c3cc9ff6e9823968a5263ccf13419d1f1b2ddeea8431fcfa816206e9b90f9d74dd6acac4075b3b6f2cea54eb36dbef7486c24954cf304314db4041a123a0bbdd760329497996b37d550c153a8ffd658449d6c4f1bff44ce49dc5c98b072a320fd6d7cf50b886948265b874df7a4e730a3b99cc76218661acdc5bdda71e645465bd1ad7ff90aa63bb26a5884667167578d01c6684a92eee1f1e20195ae233159b1988abe03d077322c11a7e3b5915b4d8cd4638ba8b1c5447e42dba3bcfbea069abcfd8a892b870c59ea4e9b46b7d90f8a8fad3311666c11e95a6b3a21620995488cd7d87fdf30d0114716fd4df1ec23df67f9ff32479e78217f7a188601e1ddcf2c6059288e9a99c7c114b62f07a5db4a1ff3df0a798f3b5d2b4dfe982c8f4b593ebb4abcb2e109c3ebff3f46c4e2048ee7bdb0e1eec87ad5ede666b45bc18e07b1a4955382fee49b0b63f814a516233acb8b918c49c77b564b9caf3d11cdec89e594ab17e951dc88c934019cb8c27e6959248ca7c89b55a2a083e5bbb92f0c90522cb35d28d0a767c429f2ca2cc53028ce8233a164c52951d60103048256d0088748cbb0c2d1b4d016f4be47dd366e744bf745afc56a42db8396599da446c7107db9f05aebbb4d6007b39bd97e398ff6cec4136100c3f12948cf38e4ac71c5f0b786b911087dcf3375047142b1f687b0215a252f8e5645b9122e08f2fe9196b562d59233e2d640ec1c5658b93e6a51b2ef39a4b4fc5c541d24da935288833c86a5817ab5acc10bebd022aaf3705fa03ad444eb8600f3dba2e2a52833262c6719de9be11fef974cadb1f44c64e095463161565ba8c47b8a245bc8c2995d2f726004bafa39afe051ddba089de356f3cfaf57d43cee27b8f9f2b937dfa286900055160564f26b7f8e2457ff37537aa07768b4e779b6616a1e6b7bde3c2cc5ea9c906b6329dd1cac9a8a2329b9f2daea9b7d64d664baf5812b913cbfa530eb0e23cbf14102de191d90ae52c18e0e74e4ea70ad451c08b0f679032de225821eb48551a44ecd1e074c866b71cd35aa5c040ed7c71fd15bfffa7fa1350aa2a4841ba8104adf6df5a6b072576105d39a5e3c1e7b28ee7e5409275483b7c003549345051ea069c2d04c08a63e5bb0214b3b981dcc33e892e111ceaa66471a540cfd15a82d02acb4bac6d10522b9eff31a1f49fbcf13ddde28ae67b8bc17da7a5e56be647291ca8eea436e435b3901e7ca3f38798253d3c573c8eb3d7d1ba8a0ba62925cfe6a9290ffcf317cd5e1e87e94848b1ee802c6e753cad6457c1abeb3931508b8291d4a3afca555f529df63f2e132e915582c0cef63a487f2e616c266cbb0c77481020fee4e0cd219e4c54e4c6df359778ce07de8cb696ec04122488d472d81753cad60a244e9686e4d2d10ac52475eed43e3d7e021e3309e6c7c74c1b8013c0c862082d0a42db4ca86a5f3428fdae29ff417907f236fe98c05fdca9387d1155c9c2519496a0f46976c375399819e133bc3e2c3cac3a44d21eefd94a4cdccf188c542fcf99b5ee0f21f6ac86d160384d5c98727dc43110c9a2740b2e2e1bbb60f6e94a611b10eff43d5127083b8b8b87153bc467f8b36978b6835cc64705d6bcf1f13de997234c4d71dafb69c210a02dd2143462891f39ad46f7b0a2ba4c0fba4fd83f3d6d6eb17740760572394386b3a298f78f30f783f7a50e2920d5010a5492a1326369f43f665bceea4a5cdcf7066cc554eee15f706c4d32c94e0c30e03be8d824570544af7831840699bf7f794ea3a24271703aef7d3da2b693d624ce3ef48a70db50cde8dbab1862667ac929ca9716c854dd6254945f7465b242d9e0eae81452a6e88410087eec77bc9187ccb95f9e141220a607859b54e6cd5b8361374d002afd1d2103aa8a3bc333ef0d1cbd95fe52448e995ce92371a1d6ce121bb951098e52d72f393640b2d245d312dca31285d12fa2ad863730b9515d516fdbdc711cd7f16bb83ecd5d728571790087b3802f7a6bfbb30ef3b1e27f3c39936a23fdfde07f0ef62f8bd9e4f7e143afebcbab8db522c853ea3d39bd1eaa57a52acdddbe40e53366dbb9ab352da6c3c988a37acfdd8a9ff7a716371659f6f18501c7ed16ee63ebd5773dca6cbab39755e2cfbc14479a94b2a80639dd703fcb100afce07845f13cc69a421a34e1e4a705b523c1b4596615994d163d183fcf22864171dab814ad35aa84f3e0b3582c92787059b9f0f2df5c7f70141ba3754c2e699f1f8336a83860b62ceb586c5eabf2d07136758b7f2d1c512be9715188deb303cde51f9d2b5c876ae5055382a6cad47c3b1afbca118189d5c8f9951c5c0bc2e467a665641968cf9716fcfba5f2ea7633a2981a9d58842caf8b5dbd36bcd24e49191407afff1421e9c330ea5e68509d71e1c7bb707aa4b11ec0d200e51325fcff0fe2b5f6eed032b748288e60c55936e22c3f09a12539999dde923c08fb75ac9a857a95b7b875aeec4418f133801c0692b2d4dc217877822483bd357b0e74ffa60f31a8fb52b408452ae87c3f50a98351c4ad95d70776e9c0be3f504454b6e5b15a48c5f418c25a55ffa8e527629bab1a8dae372fa6f60da516d226aa02645c72b45931dd48f8230bf8a299213c35cba8b842c2c6a819734f346a8d0eff34cfc00f66c1e567cffa042cd702d3b803a8ddcd65fbe8f209bfdcfe4579b935e8a3b566232e4d71fa0599de47e50cd9ed928e9ec7447a76390ed71cb150e1734d6dd86af099459b76a52f5a1599806aacdf6a06ae135af48ead7ed2e6a28b353663b82b32d149c352d3ea540185d32ae638d9a222678726917eb9ef78e1e0be17c812bf9e5be09391f1d76b3c04c27a7576344d05a90f23b328bcdff6fb7170b9b071b5b0d1bca1876eb2b05ca22c5c5223eb72bbbe5e1e1b08f38264a69beaa74fad1fa16bd5bc3bdcc47969757deb17806e55d417a37fb7b9026c36bf3e1d5320ace27ac4259292cb84e3e13ee05e9aba3e42706e7978dcabcc11328009610745d6a598ba07b7e5df0d924e9e6ff3a73a85e4d01b1a4c7c68481a6aef41a2da8ae94fa81d109528b344d0dff9d2e5c761140e1f14212dcd7a76aef9ea5a58075732ae22feecb2d6f03bc3741eae8d651edf0edf7b1972b7c7d018cb67215f1eb0ad50264c3fb77bf89383266948550ab39ed227fde3cb4c289ce3e91ee1deeccba080078680eff62895b5ea1ed4ca344a6babda3cb465bf407d352973c194c8be8f4955b4a824449debecca5563c10d2b913871214c6052a52f85b141b652595133cd27b2ad2f50d3511b10c46cf4208a7bed2843900f56d8bb57b67271f398b205e8ea8cd0182da4fe1b5d6a3f5a24e5d380be9c3d9d15b74e42195c4d555e40c970eb6cc12e8021d5b58e71d0b3e45909833a6fc17ea1a59d4ce293f226d95894cda9c533dca6d267f1ff9251dc4df5179786d7c407a2cdca16f68afc37423a156d40fd5c1950d97219481b268f24b00f7470e8a606262625a651831ee35c262d46cfc5e2e96dbcf4a71a9e1f2408fc7d124c0e3f487758f7d9fde09e31f9bf1ac201756eddd0e606e3c8f6f7cf717b6968c482fcbafecd454705cc9222380cb55b441fd82b0bef9a93ceaade6e7433c53e5cb0a936d2c270d28f558a9a24c657c409bbe49e343cfa300a846b9c8b33f35534aed83ead0ac3cafdf08283bd334a194809d722012e44f85b78ece669cc000b92faaf8440e983f517cedbf80a959b84527a3dc40bc868abe545b99f794ab3852f498adc3674a33a5b295b78029178abee102cfd5b661f07c2607f0aa647ae68e54c44ea96a93e9eb03eb0a5fdfad7925cab6a56d327b1ac55d7e996f1817c85db", 0x1000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000000540)=""/39) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0xfffffffffffffda5, 0xfa00, {r1, 0x2}}, 0xfffffffffffffd8b) 06:49:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffdfc, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2121.016590][T14715] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2121.016590][T14715] program syz-executor.0 not setting count and/or reply_len properly [ 2121.037452][T14718] FAT-fs (loop1): bogus number of reserved sectors [ 2121.046119][T14718] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x2) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x6, @remote, 0xad0}, r1}}, 0x30) ioctl$RTC_UIE_ON(r2, 0x7003) [ 2121.138239][T14718] FAT-fs (loop1): bogus number of reserved sectors [ 2121.162129][T14905] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2121.162129][T14905] program syz-executor.0 not setting count and/or reply_len properly [ 2121.162782][T14718] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:23 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x101000) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000040)={0x46, "aeab7f3cd35e06806f3bcb5a7c42233424feb7883c0fa08b93580ac6f683fae1f1bee42a612eac2288c47d4e2c2df85680b4dcb2b5b27f79702228c65917f49a6a8fe656cd58c46fd8e6cbb16d9435ecd3b078931017a0c3dadba7213ef6d18f0663683a4500f427be9bee21d682c4cc4f44d07d12a1277adce1c0bb8d076234"}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:49:23 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') bind$tipc(r0, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x0, 0x3}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) uname(&(0x7f0000000180)=""/221) unlink(&(0x7f0000000280)='./file0\x00') write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}, r2}}, 0x30) 06:49:23 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x10000, 0x101000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x40002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x2}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x20000, 0xe, 0x0, 0x43d, 0x0, 0x0, 0x7ff, 0x6e4dbd44, 0xff, 0x40000, 0x0, 0x2, 0x6, 0x3, 0xc2, 0xffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xf}, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x9) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xd99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000004c0)}, {&(0x7f0000000500)=""/45, 0x2d}, {&(0x7f0000000540)=""/243, 0xf3}, {&(0x7f0000000640)=""/252, 0xfc}, {&(0x7f0000000740)=""/217, 0xd9}, {&(0x7f0000000840)=""/107, 0x6b}, {&(0x7f00000008c0)=""/31, 0x1f}, {&(0x7f0000000900)=""/221, 0xdd}, {&(0x7f0000000a00)=""/245, 0xf5}], 0x9, &(0x7f0000000bc0)=""/101, 0x65}, 0x63) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x14, 0x6, &(0x7f0000000c80)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x54b8, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x9f, 0xb, 0x0, 0x6, 0x50, 0xfffffffffffffff5}, @ldst={0x0, 0x3, 0x2, 0x3, 0xb, 0x138, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000}], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x8c, &(0x7f0000000d00)=""/140, 0x41000, 0x0, [], 0x0, 0x5}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000280)='syz1\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x280100, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac000000000000000000000000", 0x2e}], 0x1}, 0x0) openat$cgroup_type(r2, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) 06:49:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2121.266857][T14782] XFS (loop2): Invalid superblock magic number [ 2121.361381][T15030] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2121.361381][T15030] program syz-executor.0 not setting count and/or reply_len properly [ 2121.378419][T14969] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. 06:49:23 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x264, 0x0, 0x0, 0x0, 0x0) 06:49:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffdfd, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:23 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000140)={0x0, @bt={0x800, 0x100000000, 0x0, 0x1, 0x1, 0x6c4, 0x9, 0xfff, 0x4, 0xffffffffffff7fff, 0x80000000, 0x1, 0xfcc5, 0x1, 0x16, 0x1}}) 06:49:23 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfff, 0x102a0301) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r3}) fcntl$setlease(r3, 0x400, 0x1) 06:49:23 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = getpid() r2 = gettid() r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x9, 0x189000) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000000c0)={r3, r0, 0xa8}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x30) r5 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$KVM_S390_UCAS_UNMAP(r5, 0x4018ae51, &(0x7f0000000040)={0xd46e, 0x9e24}) 06:49:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2122.113748][T15271] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2122.113748][T15271] program syz-executor.0 not setting count and/or reply_len properly [ 2122.190789][T15275] FAT-fs (loop1): bogus number of reserved sectors [ 2122.221857][T15371] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2122.221857][T15371] program syz-executor.0 not setting count and/or reply_len properly [ 2122.265919][T15275] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2122.301472][T15365] XFS (loop2): Invalid superblock magic number 06:49:24 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0xfffffffffffffe4e) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10) 06:49:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2122.318638][T15275] FAT-fs (loop1): bogus number of reserved sectors [ 2122.331347][T15275] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:24 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x280080, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000080)=""/29) r3 = semget(0x0, 0x3, 0x142) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000000c0)=""/217) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0xffffff43, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000000c0)) 06:49:24 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xffffff7f, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2122.448429][T15619] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2122.448429][T15619] program syz-executor.0 not setting count and/or reply_len properly [ 2122.514577][T15626] FAT-fs (loop1): bogus number of reserved sectors [ 2122.532801][T15626] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2122.594091][T15626] FAT-fs (loop1): bogus number of reserved sectors [ 2122.608785][T15626] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:24 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0xa00) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @bt={0x101, 0xffffffffffff8000, 0x7, 0x8, 0x7fff, 0x2, 0x1, 0x8}}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0xffffffffffffff44, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:24 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x2f4, 0x0, 0x0, 0x0, 0x0) 06:49:24 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101100, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000040)=0xf6, 0x4) 06:49:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2123.099346][T15746] FAT-fs (loop1): bogus number of reserved sectors [ 2123.109120][T15746] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2123.215214][T15746] FAT-fs (loop1): bogus number of reserved sectors [ 2123.239825][T15746] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:25 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000040)='\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x18, &(0x7f00000002c0)='procsecurity*em0posix_acl_accessvboxnet0\x00', r1}, 0xff82) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x0, 0x18, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', r2}, 0x92acca73daae774a) sched_setattr(r3, &(0x7f00000000c0)={0x30, 0x2, 0x0, 0x50000000000, 0x5, 0x0, 0x1, 0x6cd99077}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:25 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x9, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x602601, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000080)={0x29, 0x6, 0x0, {0x1, 0x3}}, 0x29) 06:49:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:49:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2123.277621][T15764] XFS (loop2): Invalid superblock magic number 06:49:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:25 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffff4, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:25 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) r1 = socket$inet6(0xa, 0x5, 0x9) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000000)=@dstopts={0x3b, 0x8, [], [@generic={0xfff, 0x3c, "6da2aba57a363e5d24316c943f7e3c037eb4e6257ff8e5864483c69ac597fad1257a5274238c73223221d21646e79a0d449f3f06858c9fe938fdde1d"}, @padn={0x1, 0x2, [0x0, 0x0]}]}, 0x50) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0x3ff) 06:49:25 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0x200000}, r1}}, 0x30) [ 2123.492550][T16284] FAT-fs (loop1): bogus number of reserved sectors [ 2123.529073][T16284] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2123.588277][T16284] FAT-fs (loop1): bogus number of reserved sectors [ 2123.605914][T16284] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:25 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x300, 0x0, 0x0, 0x0, 0x0) 06:49:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x200) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="5e5df54caa55a1"], 0x1) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000240)={0x0}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80080, 0x0) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f00000000c0)={0x79, "dfeb62ddd7a1e87e1c85026ef419701df24c8a0143b9be2da9045a6c4e9271e59cb7e8501326724eee7f332f5730e174705c2a58242ec43711873a53c342698c348997b9a18cf3dca7b959596dbe201ce5cfe1a635acf48a21e3e3dd81e2155ce742dc94feca4d36ca472dae9b2c1f3f1251dbec7408ec09cc1656f94b5ccba0"}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000040)={r3, 0x1}) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000180)={0x81, 0x7, 0x3, 0x200, 0x4, 0x8}) 06:49:25 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @remote, 0x100000001}], 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x30) 06:49:25 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffff5, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:25 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) r1 = dup2(r0, r0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/123) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2124.031594][T16436] FAT-fs (loop1): bogus number of reserved sectors [ 2124.046121][T16436] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2124.128579][T16436] FAT-fs (loop1): bogus number of reserved sectors [ 2124.140797][T16436] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2124.176234][T16446] XFS (loop2): Invalid superblock magic number 06:49:26 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x394, 0xfa00, {r1, 0x1}}, 0x96190c07fd24ed5) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:26 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)={0x10001, 0x0, [0x2a, 0x6, 0x8, 0x9, 0xac1a, 0xffffffffffffc7aa, 0x7, 0x80000001]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) r2 = semget(0x3, 0x0, 0x100) semctl$IPC_RMID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:26 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffff6, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2124.337434][T16770] FAT-fs (loop1): bogus number of reserved sectors [ 2124.354193][T16770] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2124.419535][T16770] FAT-fs (loop1): bogus number of reserved sectors [ 2124.430327][T16770] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:26 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x31a, 0x0, 0x0, 0x0, 0x0) 06:49:26 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r3, r4) 06:49:26 executing program 3: r0 = add_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000200)="828e4a678e9e476e421c66c040c5f8e9ffe17cdf5616478b61c8e1546856629739f1b4064fe6e43bee6273f0b5dc50f88ceaa93e5aaa4217112802278977dbefe9d4e55308495f2d6e03c475917274a566925fa80fc40b8820008504be9fd5f54f58f43e8b3ebd43e493aad0367ea313020b73fd5611b8111e08d1799a5e8c7c7b8f27ad34a818b77ec7b46574a0fb688c4990fe856846f471b7e51a88e2416bf1704459e0ff157bd8250b2ebe6012db626a05547f06fdfa072373eea5db68b68440e02fe5fa603ee11c44a415", 0xcd, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x30) 06:49:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:26 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0x0, 0x9}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={r2, 0xffffffffffffff27, 0x30, 0x20, 0x8}, &(0x7f00000000c0)=0x18) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:26 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffb, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2125.015766][T16890] FAT-fs (loop1): bogus number of reserved sectors [ 2125.022317][T16890] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2125.040687][T17004] sg_write: 13 callbacks suppressed [ 2125.040698][T17004] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2125.040698][T17004] program syz-executor.0 not setting count and/or reply_len properly 06:49:26 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1003}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @loopback, 0x9}}}, 0xffffffffffffff86) 06:49:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2125.148045][T16890] FAT-fs (loop1): bogus number of reserved sectors [ 2125.165071][T16890] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:27 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x1000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = dup(r0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000080)={0x3b1, 0x8000, 0x10001, 0x6, 0x2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x111, 0x1}}, 0xfffffffffffffe1d) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x30) 06:49:27 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x7, 0xfa00, {r1, 0x6}}, 0x10) [ 2125.243415][T17118] XFS (loop2): Invalid superblock magic number [ 2125.255857][T17238] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2125.255857][T17238] program syz-executor.0 not setting count and/or reply_len properly [ 2125.350369][T17322] FAT-fs (loop1): bogus number of reserved sectors [ 2125.404336][T17322] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2125.460321][T17322] FAT-fs (loop1): bogus number of reserved sectors [ 2125.467117][T17322] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:27 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x374, 0x0, 0x0, 0x0, 0x0) 06:49:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0xffffffffffffff56, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:27 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="10000000e604f3e4f5faef33cbcae232fdf661640d07574f3eae1dcdbbfa9e2d1fcade91a97d"], &(0x7f00000001c0)=0x18) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e22, 0xfff, @dev={0xfe, 0x80, [], 0xa}, 0x9}}, 0x3, 0x2d, 0x3, 0x1000, 0x79}, 0x98) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000380)=0x63, 0x2) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000002c0)={0x3, {{0xa, 0x4e21, 0x80, @dev={0xfe, 0x80, [], 0xc}, 0x5}}}, 0x88) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 06:49:27 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x111}}, 0x20) 06:49:27 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xedc000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2126.001711][T17478] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2126.001711][T17478] program syz-executor.0 not setting count and/or reply_len properly 06:49:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x40880, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000240)={0x1, r2}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x30) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1, 0x0) getsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) write$P9_RXATTRWALK(r4, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x6}, 0xf) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x3}}, 0x10) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 2126.047291][T17474] FAT-fs (loop1): bogus number of reserved sectors [ 2126.070896][T17474] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:27 executing program 4: write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) [ 2126.117846][T17506] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2126.117846][T17506] program syz-executor.0 not setting count and/or reply_len properly [ 2126.162237][T17474] FAT-fs (loop1): bogus number of reserved sectors [ 2126.185895][T17474] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:28 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x1, 0x101) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) setxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.capability\x00', 0xfffffffffffffffd, 0x0, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x82200, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x30) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000000080)=0x7f) 06:49:28 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x80) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f00000000c0)={0x72db, 'syz0\x00'}) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2126.214487][T17487] XFS (loop2): Invalid superblock magic number [ 2126.270460][T17614] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2126.270460][T17614] program syz-executor.0 not setting count and/or reply_len properly 06:49:28 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x37c, 0x0, 0x0, 0x0, 0x0) 06:49:28 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x265) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x1a) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x301200, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 06:49:28 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x1000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:28 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x20000000000, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x1005}}, 0x20) r2 = syz_open_dev$adsp(&(0x7f0000000680)='/dev/adsp#\x00', 0x8, 0x400) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f00000006c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6f, 0x400, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000740)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f00000007c0)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0xc, 0x7, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000100)=""/86, 0x56}, {&(0x7f0000000200)=""/121, 0x79}, {&(0x7f0000000480)=""/218, 0xda}, {&(0x7f0000000280)=""/70, 0x46}, {&(0x7f0000000180)=""/8, 0x8}, {&(0x7f0000000380)=""/190, 0xbe}], 0x6}, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000600)=0x800, 0x4) r4 = fcntl$dupfd(r0, 0x0, r3) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f0000000640)={0x94, 0x4, 0x6}) mq_getsetattr(r2, &(0x7f00000001c0)={0x2, 0x10000, 0xffffffff, 0x1, 0x2, 0x3, 0xffffffffffffb18c, 0x7}, &(0x7f0000000780)) 06:49:28 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) r2 = dup(r0) getresuid(&(0x7f0000000480), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000640)=0xe8) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x20082, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x9a28}}, {@fscache='fscache'}, {@cachetag={'cachetag', 0x3d, 'vmnet0security'}}, {@version_9p2000='version=9p2000'}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@debug={'debug', 0x3d, 0xfffffffffffff000}}, {@version_L='version=9p2000.L'}, {@cache_fscache='cache=fscache'}], [{@context={'context', 0x3d, 'staff_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@audit='audit'}, {@uid_lt={'uid<', r4}}, {@uid_gt={'uid>', r5}}, {@smackfsroot={'smackfsroot', 0x3d, 'security.SMACK64EXEC\x00'}}, {@dont_measure='dont_measure'}]}}) r6 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x80000000, 0x220001) fsetxattr$security_smack_entry(r0, &(0x7f0000000200)='security.SMACK64EXEC\x00', &(0x7f0000000240)='/dev/usbmon#\x00', 0xd, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r6, 0x40bc5311, &(0x7f0000000140)={0x8, 0x0, 'client0\x00', 0x4, "5e8e97ec0d7a881f", "cbee4889952105b23a94ed47c1c0f5d2201983d13a02f4310830972b02aeb666", 0xffffffffffff0001, 0x6}) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0xfffffffffffffc65, 0xfa00, {0x0, {0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, r1}}, 0x30) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000340)={0x80000000, {{0xa, 0x4e20, 0x146, @rand_addr="e9b73155ae39c311eeac2f00e4e63e3d", 0x4}}}, 0x88) accept$unix(r6, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) close(r0) 06:49:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2127.072483][T17731] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2127.072483][T17731] program syz-executor.0 not setting count and/or reply_len properly [ 2127.154772][T17737] FAT-fs (loop1): bogus number of reserved sectors [ 2127.161546][T17807] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2127.161546][T17807] program syz-executor.0 not setting count and/or reply_len properly 06:49:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:29 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2127.220856][T17737] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:29 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140), 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/150, &(0x7f0000000100)=0x96) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000180), 0x2) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 2127.304553][T17737] FAT-fs (loop1): bogus number of reserved sectors [ 2127.312934][T17887] XFS (loop2): Invalid superblock magic number [ 2127.321790][T17962] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2127.321790][T17962] program syz-executor.0 not setting count and/or reply_len properly [ 2127.328813][T17737] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2f, 'memory'}, {0x2d, 'pids'}, {0x2b, 'io'}, {0x2d, 'cpu'}, {0x0, 'io'}, {0x2d, 'memory'}, {0x2d, 'rdma'}, {0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0x34) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200, 0x0) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000080)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:29 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x38e, 0x0, 0x0, 0x0, 0x0) 06:49:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x2000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:29 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2, 0x200000000000007}}, 0x20) 06:49:29 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x6, @mcast1, 0x1}}, 0xc34a, 0x7b}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r3, 0x9}, &(0x7f0000000180)=0x8) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:49:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) [ 2128.093579][T18212] FAT-fs (loop1): bogus number of reserved sectors [ 2128.098760][T18222] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2128.098760][T18222] program syz-executor.0 not setting count and/or reply_len properly [ 2128.112367][T18212] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2128.202862][T18212] FAT-fs (loop1): bogus number of reserved sectors [ 2128.211250][T18212] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3ff, @dev={0xfe, 0x80, [], 0x15}, 0xc643}, {0xa, 0x4e21, 0x5, @loopback, 0x9}, r1, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:30 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e1e, 0x6, @ipv4={[], [], @empty}, 0x1000000000009}, r1}}, 0x30) [ 2128.245764][T18419] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2128.245764][T18419] program syz-executor.0 not setting count and/or reply_len properly 06:49:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x7ffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f0000000200)) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x1e2, &(0x7f00000003c0)=[{&(0x7f0000000080)="5461e5c167d3ac1975e7e179dc61915d5f3d806d339ff05d108bb79039736c45e260b5b03710c186ef91e30bd45334fc3096349f3073afaedc4750f372bfb26f099609e91d292fa53db50b441776e05aae05f2e30b6a80ebb7c35c2d8ffa0a4777db73e5ca5bc09fa9ba29b40c27b45d2ee4f1baa08d", 0x76}], 0x1a2801, &(0x7f0000000240)=ANY=[@ANYBLOB='nojoliet,map=normal,check=strict,subj_type=/deiniband/rdma_cm\x00,euid<\x00\x00\x00\x00\x00', @ANYRESDEC=r2, @ANYBLOB=',dont_appraise,fsname=,mask=^MAY_WRITE,smackfsfloor=/dev/infiniband/rdma_cm\x00,mask=MAY_EXEC,smackfsfloor=,seclabel,\x00']) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:49:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2128.310004][T18314] XFS (loop2): Invalid superblock magic number [ 2128.414937][T18487] FAT-fs (loop1): bogus number of reserved sectors [ 2128.471311][T18487] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2128.577140][T18487] FAT-fs (loop1): bogus number of reserved sectors [ 2128.583864][T18487] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:30 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x3ce, 0x0, 0x0, 0x0, 0x0) 06:49:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) r2 = getuid() setfsuid(r2) r3 = dup(r0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000080)={0x7, 0x6, 0x9, 0x3, 0x80}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000200)=""/253) 06:49:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:30 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7ff, 0x101800) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040)={0x9, 0x6, 0x4f, 0x9e2}, 0x6) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0x6}}) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/97, 0x61) 06:49:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x1e, "5615310e15a6b165f2403153552ededb78c36bcad4912a94a582c20ae90a"}, &(0x7f0000000080)=0x26) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x2, 0x1, 0x80000000, 0x0, r3}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000200)={{0xffffffffffffffff, 0x3, 0x76, 0x3, 0x7f}, 0x9, 0x101, 'id0\x00', 'timer0\x00', 0x0, 0x80b, 0x8, 0x2, 0x3f}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 06:49:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xe000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2129.157591][T18694] FAT-fs (loop1): bogus number of reserved sectors [ 2129.176295][T18694] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:31 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="6900000014d662dd2afcd109129d70a713f0a7f0530eba49cc51e229304a697280cb2caac88364371cd5d8e4c59dcc2c01cda65d8880c1ab23638920875806e14ee4924c8a5c790015cda1e86963081e297e886b85850460cfe63fe9807bf4157d307eefe1d90ddee1bebbad1e8382cdf877fe246fc6d804afbd4c52d9e5f5eaf387ae5dddb65e6157797a60a0883f646b6edf7a8fbb7c4daaa47f4d5694225af4ba7726404aca7073b3bb04aff06907732f5db8a8d98daf33991cdf3a8f128f52381eff8c7bfef7f977b38d43101bb94453821c1fdd73700848cf71e741ae1843d6670ee27e83651500262829fec0b9c7baa848de74fa86d962838a703dbe6ad65a887d2aec8fb38a2fb2017c0722c8071ae3dd"], &(0x7f0000000000)=0x71) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900)='TIPCv2\x00') syz_open_dev$dspn(&(0x7f0000000480)='/dev/dsp#\x00', 0x80000001, 0x400) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x3f7ca45e5ddb79ec}, 0xc, &(0x7f0000000840)={&(0x7f0000000940)=ANY=[@ANYBLOB="6403c2921e4a5d44ffbe9a41c50000", @ANYRES16=r4, @ANYBLOB="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"], 0x364}, 0x1, 0x0, 0x0, 0x8004}, 0x800) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x3) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={r3, @in6={{0xa, 0x4e24, 0x2, @mcast1, 0x200}}, 0x8, 0x1, 0x6, 0x1, 0x26}, 0x98) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2129.288250][T18694] FAT-fs (loop1): bogus number of reserved sectors [ 2129.294770][T18694] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x9) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:49:31 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x80) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x6, 0x100000001, 0x1, 0x2}, 'syz1\x00', 0x21}) [ 2129.437951][T18757] XFS (loop2): Invalid superblock magic number 06:49:32 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x3d0, 0x0, 0x0, 0x0, 0x0) 06:49:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x40000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = dup(r0) connect$nfc_llcp(r2, &(0x7f0000004b40)={0x27, 0x1, 0x2, 0x7, 0x80, 0x64, "19e601f2e81dcbf7458e8db1c2da9aae2f98a4056898c1395a03947478a9a2573ca1747766083b2df72485857df0086875819eefca9dd59f9cd381f4e898ff", 0x25}, 0x60) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000040)={0x3, 0x2f, "ad30adbb7fa41056fba0131212cd0035263712faab26c1c5adedf00317bd9d7fa1067d781f9e3d227f5514c84d93a1"}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:32 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:32 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0xc}}, 0x20) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(r2, &(0x7f0000000240)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:49:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2130.261733][T19273] FAT-fs (loop1): bogus number of reserved sectors [ 2130.271665][T19282] sg_write: 6 callbacks suppressed [ 2130.271678][T19282] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2130.271678][T19282] program syz-executor.0 not setting count and/or reply_len properly [ 2130.275845][T19273] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2130.363194][T19273] FAT-fs (loop1): bogus number of reserved sectors [ 2130.390934][T19273] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2130.400972][T19503] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; 06:49:32 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x8, 0xfa00, {0x0, {0xa, 0x4e1f, 0x4, @dev={0xfe, 0x80, [], 0x21}, 0x200020ad8}}}, 0x30) [ 2130.400972][T19503] program syz-executor.0 not setting count and/or reply_len properly 06:49:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr="e90b73e5d83dfea935eb86599ba6cdb4"}, r1}}, 0x30) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x5) r2 = dup(r0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000200)={0x3, 0x0, [{0x2, 0x3, 0x0, 0x0, @adapter={0x80000001, 0x4, 0x9, 0x5, 0xdf}}, {0x1, 0x3, 0x0, 0x0, @irqchip={0x341, 0x100000001}}, {0x3, 0x1, 0x0, 0x0, @sint={0x2, 0x3}}]}) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00000000c0)=""/225) 06:49:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:32 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 2130.501504][T19326] XFS (loop2): Invalid superblock magic number [ 2130.586006][T19635] FAT-fs (loop1): bogus number of reserved sectors [ 2130.595095][T19635] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2130.614208][T19684] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2130.614208][T19684] program syz-executor.0 not setting count and/or reply_len properly [ 2130.690137][T19635] FAT-fs (loop1): bogus number of reserved sectors [ 2130.697493][T19635] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:33 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x3e4, 0x0, 0x0, 0x0, 0x0) 06:49:33 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8000, 0x0) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000080)={0x4, 0x3200e0, "1e7e3889cf0593f5b6584305a34340b358c385f4be94c22b", {0x3, 0x2}, 0x800}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) r4 = geteuid() lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x0, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@ipv4={[], [], @initdev}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) getresuid(&(0x7f0000000680), &(0x7f00000006c0)=0x0, &(0x7f0000000700)) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = geteuid() r11 = getuid() getresuid(&(0x7f0000000800)=0x0, &(0x7f0000000840), &(0x7f0000000880)) r13 = getgid() fsetxattr$system_posix_acl(r2, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000008c0)={{}, {0x1, 0x2}, [{0x2, 0x0, r3}, {0x2, 0x6, r4}, {0x2, 0x4, r5}, {0x2, 0x1, r6}, {0x2, 0x2, r7}, {0x2, 0x1, r8}, {0x2, 0x2, r9}, {0x2, 0x2, r10}, {0x2, 0x0, r11}, {0x2, 0x2, r12}], {0x4, 0x4}, [{0x8, 0x4, r13}], {0x10, 0x4}, {0x20, 0x2}}, 0x7c, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:33 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x3, {0xa, 0x4e24, 0x40b661a, @loopback, 0xfffffffffffffff8}, r1}}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000000)=0xc4) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={r3, 0x7}, &(0x7f00000000c0)=0x8) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:33 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r1, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:49:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2131.333477][T19839] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2131.333477][T19839] program syz-executor.0 not setting count and/or reply_len properly [ 2131.371803][T19839] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; 06:49:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xbfffffff, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2131.371803][T19839] program syz-executor.0 not setting count and/or reply_len properly [ 2131.414597][T19838] FAT-fs (loop1): bogus number of reserved sectors 06:49:33 executing program 3: r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @netrom}, [@netrom, @rose, @rose, @rose, @netrom, @bcast, @default, @netrom]}, &(0x7f0000000300)=0x48, 0x80000) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x60000, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000003c0)=0x9, 0x4) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000200)="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") write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0xfffffffffffffe87, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}, r3}}, 0xfffffffffffffe4d) [ 2131.457525][T19838] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:33 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x26) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2131.504795][T20038] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2131.504795][T20038] program syz-executor.0 not setting count and/or reply_len properly 06:49:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffbf, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:33 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:49:33 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x2, 0x400000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x8, 0x0, [{0xc00002e3, 0x0, 0x2c}, {0x4b564d04, 0x0, 0xa7ce}, {0xaf3, 0x0, 0x40}, {0x0, 0x0, 0x1}, {0xae5, 0x0, 0x8000}, {0x0, 0x0, 0x4}, {0x973, 0x0, 0x3}, {0x89a, 0x0, 0x7}]}) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x8) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) uselib(&(0x7f0000000240)='./file0\x00') [ 2131.550188][T19838] FAT-fs (loop1): bogus number of reserved sectors [ 2131.562059][T19838] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2131.573201][T20004] XFS (loop2): Invalid superblock magic number [ 2131.653713][T20106] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2131.653713][T20106] program syz-executor.0 not setting count and/or reply_len properly 06:49:34 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x3e8, 0x0, 0x0, 0x0, 0x0) 06:49:34 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x300000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:34 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000040)=0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:34 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:34 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x8000) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x1}, &(0x7f0000000140)=0x8) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x9, 0x2000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) [ 2132.403833][T20293] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2132.403833][T20293] program syz-executor.0 not setting count and/or reply_len properly 06:49:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:34 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) socket$alg(0x26, 0x5, 0x0) [ 2132.490005][T20297] FAT-fs (loop1): bogus number of reserved sectors [ 2132.545874][T20297] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:34 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}, r1}}, 0x30) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x8800, 0x0) getpeername$netlink(r2, &(0x7f0000000140), &(0x7f0000000180)=0xc) [ 2132.594674][T20456] QAT: Invalid ioctl [ 2132.601079][T20480] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2132.601079][T20480] program syz-executor.0 not setting count and/or reply_len properly [ 2132.624753][T20377] XFS (loop2): Invalid superblock magic number [ 2132.641278][T20456] QAT: Invalid ioctl 06:49:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:34 executing program 4: socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000000)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x402, 0x0) getuid() ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000080)={0xedb0, 0x9}) 06:49:34 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x30002) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080)=0x2, 0x4) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x8000, 0x101000) [ 2132.680366][T20297] FAT-fs (loop1): bogus number of reserved sectors [ 2132.693771][T20297] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2132.788956][T20635] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2132.788956][T20635] program syz-executor.0 not setting count and/or reply_len properly 06:49:35 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x3fc, 0x0, 0x0, 0x0, 0x0) 06:49:35 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f00000000c0)={r1, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffd51, 0xfa00, {0x3, 0x0, 0x106, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) sendto$netrom(r2, &(0x7f00000001c0)="0ad330bb3d6bc9960cea4497acca73160aed01c6801d5698d596dc58a4e69c25aabb32a2917ed3d250fa7637f41ae0b23b0c02c015930022ed99b96e32a476dacb146c01573727e266ba0c35c9233a21277e02217230d18128080a28e5f40e58140d4604339d5911ad6e3c0039c0f0275e348c0add2e47a4108cc16bb3bc542c1d1475590eef7604b859e8f288ce07825950e3de8a38929316c5cfb48a3cb57bf7f64797c0a0554c5c958a98347ce9263769cdf54c149a12735686b337a6be48fb06133ff53a3f5f8c5cd929220cd0181a59d3dacf824bb637b30b1dc03d2316e0d780a2a3abb6ed20186fa8c65025fdeee3122ba115e2", 0xf7, 0x8000, &(0x7f00000002c0)={{0x3, @null, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000180)={0xea, 0x1f5}) 06:49:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:35 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:35 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) ptrace$getenv(0x4201, r0, 0x290, &(0x7f0000000100)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3553, 0x0) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000080)={0x5, 0x3f, 0x400, 0x23, 0x1}) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x2e) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x30) 06:49:35 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x127) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x3) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:49:35 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2133.438531][T20853] FAT-fs (loop1): bogus number of reserved sectors [ 2133.463969][T20853] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:35 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = getpgid(0xffffffffffffffff) ptrace$setopts(0xffffffffffffffff, r2, 0x4, 0x2) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x4, {0x10000, 0x664, "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", 0xa3, 0x5, 0x6, 0xfffe, 0x7e000, 0x3d04, 0x1f6, 0x1}, r1}}, 0xfffffffffffffdf7) r3 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x8, 0x40000) write$P9_RSETATTR(r3, &(0x7f0000000200)={0x7, 0x1b, 0x2}, 0x7) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x10000005) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @mcast1}, r1}}, 0x30) [ 2133.570395][T20853] FAT-fs (loop1): bogus number of reserved sectors [ 2133.588108][T20853] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:35 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:35 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) 06:49:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x500000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2133.649182][T20937] XFS (loop2): Invalid superblock magic number 06:49:35 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2133.763365][T21123] FAT-fs (loop1): bogus number of reserved sectors [ 2133.801444][T21123] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2133.868529][T21123] FAT-fs (loop1): bogus number of reserved sectors [ 2133.875187][T21123] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:36 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x500, 0x0, 0x0, 0x0, 0x0) 06:49:36 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x200000000000000f, 0x4000) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x8f, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x8, 0x101003) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000180)=0x61b1, 0x8) 06:49:36 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200003, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000040)={0x7ff, 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f00000000c0)=""/9) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x5, 0x1) 06:49:36 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x600000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x109100, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000000c0)={r2, 0x4, 0x7, "0b720048b24c7315fe4d962af7d289c8cb2b"}) [ 2134.532202][T21225] FAT-fs (loop1): bogus number of reserved sectors 06:49:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2134.583046][T21225] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:36 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:49:36 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x3ffe, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)={0x80, 0xcc, 0x9, 0x8}) 06:49:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xfffffffffffffbff, 0x400800) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x7}) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000100)=0xf4240) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) [ 2134.667717][T21225] FAT-fs (loop1): bogus number of reserved sectors [ 2134.677543][T21265] XFS (loop2): Invalid superblock magic number [ 2134.685036][T21225] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:37 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x600, 0x0, 0x0, 0x0, 0x0) 06:49:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:37 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x700000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 06:49:37 executing program 5: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x2, 0x0, 0x7}}, 0x14) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0xb9c, 0xa46, 0x7, 0x40000, 0x6}, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x280200, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140)={0x9}, 0x4) 06:49:37 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x20000000000000, 0x80) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040), 0x4) 06:49:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x30) [ 2135.506142][T21681] FAT-fs (loop1): bogus number of reserved sectors [ 2135.507473][T21686] sg_write: 9 callbacks suppressed [ 2135.507485][T21686] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2135.507485][T21686] program syz-executor.0 not setting count and/or reply_len properly [ 2135.512805][T21681] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:37 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x7fffffff) 06:49:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2135.618612][T21681] FAT-fs (loop1): bogus number of reserved sectors [ 2135.636091][T21681] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:37 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x800000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2135.693241][T21956] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2135.693241][T21956] program syz-executor.0 not setting count and/or reply_len properly [ 2135.713730][T21880] XFS (loop2): Invalid superblock magic number 06:49:37 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r0}}, 0x10) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x91) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000480)={0x3ff, {{0xa, 0x4e24, 0x54, @mcast2, 0x200}}, 0x1, 0x6, [{{0xa, 0x4e21, 0x9, @ipv4={[], [], @empty}, 0x7}}, {{0xa, 0x4e21, 0x9, @rand_addr="c116696e03fbeb929f3ea734785bb708", 0xb3}}, {{0xa, 0x4e20, 0x4, @remote, 0x1}}, {{0xa, 0x4e21, 0x38e, @remote, 0x69}}, {{0xa, 0x4e21, 0x7fff, @local, 0x7c89}}, {{0xa, 0x4e20, 0x1, @rand_addr="1785971f1977d58a3b2009ebdc67e0cf", 0x7}}]}, 0x390) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000080)={0x1f, 0xfffffffffffeffff, 0x81, 0x6, 0x639}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r0}}, 0x30) r3 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000200)={{0x5, 0x0, 0xf2, 0x0, 'syz0\x00', 0x4}, 0x3, 0x8, 0x7, r3, 0x3, 0x6, 'syz0\x00', &(0x7f0000000180)=['/dev/null\x00', '/dev/null\x00', '/dev/null\x00'], 0x1e, [], [0x38a2, 0x1080, 0x40, 0x4]}) accept4$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10, 0x80000) [ 2135.805004][T22102] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2135.805004][T22102] program syz-executor.0 not setting count and/or reply_len properly [ 2135.861521][T22103] FAT-fs (loop1): bogus number of reserved sectors [ 2135.905949][T22103] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2135.974759][T22103] FAT-fs (loop1): bogus number of reserved sectors [ 2135.988881][T22103] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:38 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x700, 0x0, 0x0, 0x0, 0x0) 06:49:38 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x8002, 0x0) execveat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000140)='eth1[#cpusetppp0lo[\x00', &(0x7f0000000180)='\x00', &(0x7f0000000200)='posix_acl_access)securitymime_type-.(eth0userGPL$-ppp0user\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='/dev/vga_arbiter\x00', &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00'], &(0x7f0000000540)=[&(0x7f00000003c0)='\x00', &(0x7f0000000400)='/dev/vga_arbiter\x00', &(0x7f0000000440)='/dev/vga_arbiter\x00', &(0x7f0000000480)='}wlan0\'\x00', &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000500)='\x00'], 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80001, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000040)) 06:49:38 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x6, 0x2000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000180)=0x8, 0x4) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f00000000c0)={0x7}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:38 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) getsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 06:49:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x900000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2136.606358][T22138] FAT-fs (loop1): bogus number of reserved sectors [ 2136.613754][T22143] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2136.613754][T22143] program syz-executor.0 not setting count and/or reply_len properly [ 2136.631994][T22138] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2136.640543][T22143] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2136.640543][T22143] program syz-executor.0 not setting count and/or reply_len properly 06:49:38 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x30) 06:49:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2136.742844][T22138] FAT-fs (loop1): bogus number of reserved sectors [ 2136.766184][T22138] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2136.783265][T22308] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; 06:49:38 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xf35d197a1b406bb8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}, r1}}, 0x30) [ 2136.783265][T22308] program syz-executor.0 not setting count and/or reply_len properly 06:49:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xa00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2136.836717][T22235] XFS (loop2): Invalid superblock magic number 06:49:38 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x202000, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000480)={0xa, 0x0, [{0xffffffffffffffff, 0x0, 0x8}, {0x0, 0x0, 0xb08}, {0x5, 0x0, 0x9}, {0x4, 0x0, 0x3a4}, {0x7, 0x0, 0x8}, {0x6, 0x0, 0x200}, {0x37d55a7, 0x0, 0xc648}, {0xffffffff, 0x0, 0x7f}, {0x8000, 0x0, 0x8}, {0x464, 0x0, 0x81}]}) r3 = syz_open_dev$radio(&(0x7f0000000540)='/dev/radio#\x00', 0x0, 0x2) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x3, {{0xa, 0x4e20, 0x10001, @loopback, 0x1}}, {{0xa, 0x4e22, 0x1, @ipv4={[], [], @broadcast}, 0x8}}}, 0x108) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000140)={0x6, 0x1, 0xa2, &(0x7f0000000080)="528a92bb97061b10e048f813208b1880e3f5d67ab25d807b86482dfcc3c206635162729633b1055061a0d3dc8ba02b654a33ea54f57bf6a6e115a9a2ce9d115ca2a899125884854d6dc100942cb41ce6a26fc67e2e91d8d103a3398503251727cc9815a9daca2e1db72c44271ac85eb957b3f1aa52b2ab65aa08cdc57613e6a8c398032e7650edc7df54a31981269518e2144e0593e426b6abae97a89418fff42e66"}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000180)=""/58) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f00000003c0)={0x23080261, 0x14, [0xffffffffffff1672, 0x3ff, 0x1b53, 0x6b7d, 0x101]}) connect$ax25(r2, &(0x7f0000000580)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 06:49:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2136.953824][T22446] FAT-fs (loop1): bogus number of reserved sectors [ 2136.959645][T22453] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2136.959645][T22453] program syz-executor.0 not setting count and/or reply_len properly [ 2136.967748][T22446] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2137.057895][T22446] FAT-fs (loop1): bogus number of reserved sectors [ 2137.074622][T22446] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:39 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x900, 0x0, 0x0, 0x0, 0x0) 06:49:39 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) write$P9_RREAD(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="8a0000007502007f00000098dd890c2fa815cc99d197fd24e3dc44d875ee12661284944f9a60e45822da4d7114e5d81db2fe9eac64bff95daf997c264d9bd9dc446ee7ff7fbdb2ae4846f290be487982adfa18e0ffbee1a6177b5d36f224ebef36882c00189b7e7b762abaf3037055587ae3bb32e842cbdc25d3278a0c18a885b824f68b361f13a43156"], 0x8a) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0xffffffffffffffdb) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r1, 0x0, 0x0, 0x1}}, 0x20) 06:49:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:49:39 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x402000, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @multicast2}, &(0x7f0000000140)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) r2 = msgget(0x3, 0x80) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/12) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:39 executing program 3: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x440a00) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000100)={0x9, 0x37000, 0x8, 'queue0\x00', 0xe4}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000200)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000480)={0x2, 0x0, 0x2080, {0x2ac594d807e7f104, 0xf000, 0x3}, [], "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", "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"}) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) 06:49:39 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x1400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xbfffffff00000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 2137.640248][T22500] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2137.640248][T22500] program syz-executor.0 not setting count and/or reply_len properly [ 2137.713871][T22499] FAT-fs (loop1): bogus number of reserved sectors [ 2137.743189][T22592] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2137.743189][T22592] program syz-executor.0 not setting count and/or reply_len properly 06:49:39 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x105000, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000100)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000080)) prctl$PR_GET_TIMERSLACK(0x1e) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x30) [ 2137.766789][T22499] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:39 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000140)={r0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@rand_addr, @multicast2, 0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr="43354f91ef438311ac74f0b31cb5502c", @loopback, 0x9, 0x5, 0x3, 0x100, 0x9, 0x400100, r2}) r3 = syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x10) r4 = getuid() ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000300)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r4}) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000280)=0x4) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e1f, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2137.825045][T22599] XFS (loop2): Invalid superblock magic number [ 2137.853886][T22499] FAT-fs (loop1): bogus number of reserved sectors 06:49:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x38}, [{}]}, 0x58) [ 2137.869041][T22499] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:39 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:49:39 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x1f00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2137.954967][T22781] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2137.954967][T22781] program syz-executor.0 not setting count and/or reply_len properly [ 2138.052472][T22915] FAT-fs (loop1): bogus number of reserved sectors [ 2138.089406][T22915] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2138.187629][T22915] FAT-fs (loop1): bogus number of reserved sectors [ 2138.195245][T22915] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2138.216116][T22599] XFS (loop2): Invalid superblock magic number 06:49:40 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xa00, 0x0, 0x0, 0x0, 0x0) 06:49:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x38}, [{}]}, 0x58) 06:49:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) socket$isdn(0x22, 0x3, 0x22) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0x21, 0x1, 0x7}, 0xba4}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:40 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = socket(0x1b, 0x80000, 0x36d) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x102, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:40 executing program 4: r0 = getuid() syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0xffffffff, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000200)="7b1d2439ccf07cc141c8583f4271187a5c423be1f5caf55106bc457552daf328a63a191bd846168e12e6cbee6b06911c9cae671ed1a4e16b629d831a4ea24845667a100b11295aee1f4fa9441948e971ff1f245a146fcf63aef6438e1e5479781aec168eeb99c8592150dfd3cee783753b506492cc2da3f5144d0ca4caa2468a9b4fac220af121bc2a25c184351e5620031b7e5e95d84e856e3893771bd4901b301694ce11c884c88a640d25d7959fe533aa", 0xb2, 0x6}, {&(0x7f0000000480)="0e29a1c63598911179e98880917d72a0600912e43c4e6d177a2ce4b2b63450e0f28fe9134f27d4c187956a7fe588c5fa8ca00155b4577e76d5e2fd01205d5c483f2760a0ccfcf0dfbb8ba20af392f41c00f2a566e3df706d75594c65a98a6bfb62e32d0d2fab9f6ddbda186b02f99d67d356170c50ffd604eb138e09ebac2913a636654e505fb4f7e91f7c04a9c293690149e7da47fff7dfe3a05da6ea069e5c07c89e02ccf732b8f1afe3a28ef27d5ec6d6434d00fa90f3772308b2d688fee14d50f76f4c62f99ff644670222861ed9d080f4e7967f6c5ec2dab93ab377d9e121b0f8a349c28876b0982c17debfc3b1240bbeaeb2cc92f753b8694f2f712473ca94d96428e73c7a1107e90f693fcd4ebb1d387db898177decdcad7c7fd77ba4e72ce7b30057531b84538656fb14be6b21c93c36ff3ee76c1f74bdc5639cd46ef822dc82ab821ab72b1aaa4a0f7752389ae4295b17375993d0be5cee5c5a452aad6ef542a7c55eb7b904ba2918af234fea2f29a023d41120e2009b1c3d1f9181d8303318385477fa72f2680dc9d64498887592aff3cd79174073df0f1de24fc78288d43fd9f97b15031d6d4e22ac4867b5470a101a475474f4d3a4ad98dff83aa33c291d4028a0cb0c93fb4fc9659be5ac3cbcfe0169ffa80614150ce48de8bb5ceace962fdce6e66ecdebe395a297298a66ca418cbbc2a79b0aac9ce7426db9f5b32a13272ae77e0de1a30217889375529d62c1e79e228ddea3d417b25f541b5b5fe8dbc4423366290fe69f9e3c02a1666c620609205b6e99e3e95ea58182f6fe99e410c71b6efe01ee8685492b26387b1dfa712190b6c4c63f22257a441561623caa5ff3a848d37c583fed6bcefaa534c052329115ddd9e39db6715d688f16ded34378c7f79698b54d7f81a4031a1d21d986e86fb6ca4ddd70f4886a251e83bfe9155eabe4ad34a3e37ed3a111ff4fb927eeb71e4a67f06e4f8316d88ea7aa4ae3553abbb9b42f4e0c3fa6a73646cb90bb497a1d172d8cde9b9ce7fcf278421b128a0c5eb560e8c88319bfce78f7e90543c5159626bbc987cc73d6e934fe9ff229689738be73b4567ead3a8e65a0349038012a0db81d5fa216947a8b166ae1c5490daf24e13d19d246a6f69dd138249b50467e5b31a1f541e34a9917781d23515e0fabc891960b06c6fac71d6832a701bd4797dd5912c2b66a3db5f76e9ef1cc558123595e0bc7ccb04e8b644893d07e9bba62f70a2634af2ad5bfc5e773e2d21c73528ae430622c69f4b2851bd4b1df1a0a42b6ae64b60d7312e21e78711240fd5c326b896ef56887bb0400bd5eb968e9442d9504777df300d1da2de63badbeaf69967d7d0120f529799bc6fcde91d97383780fccd99730ea297cc638b71ffcc4d381ce9512a07e47a865bd408b01b7aec17edad7cca15ba79236a21e3f7972d9829e0f123cbee7f51b9682319bb4e6fc3982de8c336787fb2c461a879f4470b9564252ae832af29d665edf26fb161d81480e182389442ee8528a84868d940f6ae7755b41180fc32cc6df3caea1a8891c9f9c668b383216b262e2098b21275a2bd06fc1c5d820a35a6d553e8ae3f08f2e1769c17cebe96ba0c701ebb863ee3067777ea52a71504395ca73fbc788d94e34227d73e552ca4515c899330812d34ac42bd15e25ad65a493f85c0e45b0ed2f3a6f7dc3214e34358aac3548161ec1f5134937d5ddd7f4d632ee3da9278c6f6d10e2faac5b56e5beab9ad6045513bd651deb4b70a5658fe4af6ccd7fe056d9f882ad423799e2ef1073cf138bdcc44beacd0d6c62870b7084da7a3347a16ef9a16191a1e87703aa0e6a0cf42529dbe6983c37f53c93bc8174c6a2d47c61532fffb933735a7f3a62c58f84625057681728a88ea6c3790c52c747a721027c7092d8d4807d9c160b9fdc3702b0143b4d94d2f2b3d85bda3f8fb0c3edf147a9bfb15f5b56dd27df247a3738d4f86ba86ba93a9cdd3b4afe95bd30119765d323dcff3e76e6d2af4620b2338d2fe1eb19ebda385ddfea0e09f0599040dce60165af1390925b082b71e763d0e249f0cbac367d43b15dc8dccee91be48416107ddbe69d5caf764041fc12871fabf1b3241c0a5e8ce1636cdedcbd834eb25d20f2d807f3d86f60a2f9d45b7202f7928a46f1f296d754b518cca58e4a77cc78d0d0e9952d342ffaa371da05fe7056b4a719834f2ca90bf70f1fea97f8d48806d2f003bbb55a1cb546c2152aec6c9e43680c34804ff4d23b02086c1fb9a96ef442a3db5920c6ea26697d901a67f9597d4a4042f6e26c5b728f90d8d5f295f8cd85e2b0ef34900b7492658e42c78add090779e6ee306bb59ea88cab0917189d96b41e67bf892b83aaf65ed442c3a5829c1bec60b8ec6925ec4113c856e3dffa6d6c8f8dc174f6d8f94676473b060cf222e671228d093f61011dcd04918bbe3d37877baf9dc5ab5b1a1e44c7b854bbac8501c9e1ca1704d42e1b6bb24c561ce91eed7bacf65992ae5ed75131a70299174b912804ab51b70341bec7a73a0006fb54a1cff7df22d046d278391bdac4d42302c1e6eeaa8b407e66d08049cfdb315e935dcfa6f2bc3d8c05a36a76cf56a36f5f0a2804c020d2456725eb27a50f9cd86cc249630d79d2a115729beb5b302d7881801e682643edd35689f089009f42748cc5ecae3c9743fdfd5b079383e45da1ecf3aebe968870c800b0252210b78e2cb18668cc16ede99f29f828c60dcfa79dffe70b877fe731ba296d6f6a26090a4da49e975cf291c0eaa389571e68331ae2ab81a7dd219366aab05421b5d7eccaf9e46a9030d4ec65953e29fcf27ec9c49235a22fe759d8628996641cd985e86653125825a6e0088deba6de628c6580e44cca0a0666872eb672996de0428b374276fd4df6d7183ce3130c6d2faf0a0be24fec1f4d057423d32e0fae462336bf48eb347f9dcd8c073ab6bfa8cc93d0ee872312b87ada047f9da1f9e48027f91d09018f51e32ff7989032e861fa4799a8072f62b2b43bfae4cd87bae1182a35d2fda5485269b4955b72e776c764f68871f5f61ca6483bdbe6a23b0c1d459e8b586c6373dcf66a74f0a4250ec2c64f0e7c55d195bebae91b0bc024a132644880b63d9cdfa3c365a745d15723a7fd8ad220628897e4e18d3f5fed337a33612d11fd2be8678e319711b29fdb3c15e3647c61c9d4015d517e6040a2033ecbd5050a97665b47540aee70845b0c80f5385f9c2b6b036efeb9de924a2e7a2cbaa6b970447a51b85a98c7db7e06b0b90fb51c49972a655c6e7083e1589de530da71c13ac94819d667ceebcb207eed4c5376fe77f26bcdecfe6167e491db68d22b5b18eaedd7a6108d657033972dfc784b16272a93355492b7568f81af9cd2f1b00834479fa35bd031aa935ecb2ba0fff4fdf3ee0af6ff662f41143fd5dad9b8f71033d2b9cf8954ec4c3bf71872a8df779314f52fc7cb6e9ce1b78b46360b4bfaea6c5fab54c194de21c762eeadd6973c1dc079ad2fbf1cfe0beaa9951828e01431fe291494ef4d83921d25835cea8e81c6e5116f9e17db164cc81f827aa08c6237f31c0a8e7b5a6a29686c4adfccfb6791e2d5b134664252dc89d6a13f857aef605e68a7790fa2065bab705335d20384d90eed8a2626d36037b95b4228b705dac48c0913910ecfec9f447046eedc0f2dcdf08bff5c7ebc064e27c32daa1451692dfbe7de457e2612a44270717c824735b7c099ce39a1b016f4ec9fea09c769598da15f6c0932a2898e6fcb64c3a83f205f133f29ee8f7b1e371fb631f93a4e461733b236f62b7f03fccd1c7a8c9981848ae02159dce141cfc651ba95ba6c8c609e8d32fe30561d51cbd8501b791e6c4541831466dbb674481a1bac307667b8b06753937652771186b2a0451c7d8ef0450ab96f1f0bb09695bf6e04c7be6907d420523d7dd212f4d280c0b9c3a8896353b2466f71db2339145345732d6f81ff60af1198134d140906b884cea8f9622d7879337fcb2f11f383949a0b5d86af0564b1ea0b18738eb405f7496cfa1e65cce83f41edd3e8936c216b0085134a2da7e433d787f15aa3d2c6f5bfac1f3a2a0a8ac8ca2752e1b37cdff1378d9eeba83cedee2705131ff2fc49ded06aa69bc2d61e76d73989d265a1120d70c7694af382b0e29adc8843c5f74a090340351e458ec5458f251e04e32ae06be05ef7e25fc4dc9d74cef9ffed6fa63ffae8e89132b7a387c9206753c30e73e14c87eced6ace747a8923b7c1ace81edc78e6d8d0765bb5a3555e8a75b9a6529af17620f535850178dc733ea8609de3d1b686776f9ee19be81581054941aed58a0b07efcff4834dbf11f2c33370015bdcb634210307be1c2028bfc7d3691215f06119e6d1da765f76a24813bb7d9586a1b91d68481530cc4ac359aa304fa401cd16cce79baac704dc5b4b7b4e42fd9689d84b64e0469439c60889bc589df6ae4fcb60eba5b41a6ae93171a06183bad78b618ac270ee2d15fcdbb22c3af35333023912925da09d9bab7febcb98a25240577db6b54559214fa16d993806ffcc4672cd31ea4970afbbc12c6d6a9c2af5ce22db51da792a947b9d3643089bb0036392dee4f2affb8c4545e735299af54c9de2adb14a952d8b2e87bab311473cca203d92a9e0121fbc73e8568b54b5f5bda320b66b03b977b910e29a364f20e92f64348b4c41e3fcfe7f281b13b25c669379aeda27810e3b3ac5d0d377cd7aa7b81c7789e6aa88bcb72570b39e113fe4efc4b5367d9675c11f8118e5c253c4511254f4a581dcd14fe9501f87412cbc252125c287da7470fefe794b4bcd279f885751dbfd06bae6dfa6434b5f1bd6d062a3ae321e745a4ed32c939d68fda0b255074e7296be11717653df0007f425baeef84a7d6f3430f72a89dddc9852d35e04c3be41dc9101e3ed3e5427285ff3dbd9c5c1051eed6b1554fa7885e87f4f1e180ae705b07a3d83b61783a3a24a63fa97f9e233fd8480b5861a021c7e70088f3b07590daa16fc3e18de6ec86442f6d73e86d3237dc7c826a1e402020e748f37dfd528837fae4e627d545685b093353c90906f5e1d73dd739aa08649498267756ada74c636c715ecddb0b44ff38b397a63c694955d61b620e4715b7acf3d14cae6378ab62c5672cbfac2975e8b246ab46134e30a7b1df07bb2ead266a08c8a6d6afaac30ca77a969f44bbd8a3e0f0097a1e333070f1e0ac2a4fcc66c0a27ee40e277940f4c044534c432a336e67bb81e47dba80890fe0626a2439da25ab125755ef0c6604956cfdbbf2f66382814a1155c9b4d978c4171477727045cb0e5b791d188158c660a92202fbee3a9f789e0d3d8f095489072eb2cb1cc135f55ce84564ecbfc1c468fe2215321c581074a09aae27c5fd7c4605c565f677fdb619c49f5a384f8a154681138d55da52e707810ba2daef804d55a2878f7f9f18dc8b82fe540f3234e431022d8ffe0e56d7e721c5cc208bd2178815c42780c386f0205d276448304273f3e73d5dd575ab10623f30a88895841222f0fea850ba53294db4554e3c6696f57bc00ed793213ed7953e9f101e3a987584b85e5a3ba1c90020c8aa850bd5abcedbaa7c67aca6d790b1c66d330a72cca8ce27a0653464a89f83a4009309bd04e896dd05610f26225e4876e4a9783b24d3abec7ced9387ab1064fb3296dae774a9d472751edba72647887b51a3480bb3301c058654dc35c4ca6983b35db27632c07a1e3618090cc1b547b89734f98486b5077870cab30fd5ed4daa90e6da1bd3b69c543", 0x1000, 0x3f}], 0x800040, &(0x7f0000001480)={[{@utf8='utf8=1'}, {@rodir='rodir'}, {@uni_xlateno='uni_xlate=0'}, {@numtail='nonumtail=0'}, {@shortname_mixed='shortname=mixed'}, {@shortname_mixed='shortname=mixed'}], [{@fsuuid={'fsuuid', 0x3d, {[0x76, 0x64, 0x77, 0x33, 0x65, 0x38, 0x77, 0x66], 0x2d, [0x34, 0x39, 0x77, 0x37], 0x2d, [0x37, 0x0, 0x63, 0x3d], 0x2d, [0x32, 0x73, 0x7f, 0x30], 0x2d, [0x64, 0x33, 0x34, 0x35, 0x67, 0x75, 0x62, 0x65]}}}, {@audit='audit'}, {@audit='audit'}, {@dont_measure='dont_measure'}, {@smackfsroot={'smackfsroot'}}, {@fsname={'fsname', 0x3d, '/dev/infiniband/rdma_cm\x00'}}, {@context={'context', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, '/dev/infiniband/rdma_cm\x00'}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@dont_hash='dont_hash'}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x10f}}, 0x263) r3 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x5, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0xb73, 0x2, {0x1, 0x1, 0xffffffff, 0x3, 0x1a3}}) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {r2, 0x2}}, 0x10) 06:49:40 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x2000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x38}, [{}]}, 0x58) [ 2138.727567][T23063] FAT-fs (loop4): Unrecognized mount option "fsuuid=vdw3e8wf-49w7-7" or missing value [ 2138.791991][T23065] FAT-fs (loop1): bogus number of reserved sectors [ 2138.803433][T23065] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x40000003c, 0x200000000000201, 0x5, 0x0, 0x0}, 0x2c) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/20, 0x14}], 0x1) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x38}, [{}]}, 0x58) 06:49:40 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) write$vhci(r2, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) [ 2138.922334][T23065] FAT-fs (loop1): bogus number of reserved sectors [ 2138.947566][T23065] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:40 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = dup(r0) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7fffffff, 0x2000) bind$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x1}}, 0x10) [ 2139.001586][T23198] XFS (loop2): Invalid superblock magic number 06:49:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x38}, [{}]}, 0x58) 06:49:41 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xd00, 0x0, 0x0, 0x0, 0x0) 06:49:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x2010000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:41 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) socket$inet_dccp(0x2, 0x6, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0x2}}, 0x18) getrlimit(0x5, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) 06:49:41 executing program 3: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13b}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x10000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x100000001}, {0xa, 0x4e23, 0x0, @mcast2, 0x2}, r1, 0x3}}, 0x48) r4 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x8, 0x309040) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000240)={'ah\x00'}, &(0x7f0000000280)=0x1e) setitimer(0x0, &(0x7f0000000080)={{}, {r2, r3/1000+10000}}, &(0x7f00000000c0)) 06:49:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x38}, [{}]}, 0x58) 06:49:41 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r2, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000140)=0x84) alarm(0x1000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 06:49:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x38}, [{}]}, 0x58) [ 2139.895599][T23626] FAT-fs (loop1): bogus number of reserved sectors [ 2139.919595][T23626] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x38}, [{}]}, 0x58) [ 2139.988799][T23626] FAT-fs (loop1): bogus number of reserved sectors [ 2140.004302][T23626] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x400000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x400040, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:41 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x1, {0x0, 0x6, "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", 0xb4, 0x200, 0x2, 0x5, 0x3ff, 0x6, 0xffffffff, 0x1}, r1}}, 0xfffffffffffffec9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xb, &(0x7f00000000c0)='{,\xa5cgroup+\x00', 0xffffffffffffffff}, 0x30) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000300)={0xa, 0xfeda, 0xfa00, {r1}}, 0xc) sched_setparam(r2, &(0x7f00000002c0)=0x4) [ 2140.031262][T23631] XFS (loop2): Invalid superblock magic number 06:49:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x38}, [{}]}, 0x58) 06:49:41 executing program 4: r0 = epoll_create(0x47e) fcntl$setflags(r0, 0x2, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2}}, 0x7) 06:49:42 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xe00, 0x0, 0x0, 0x0, 0x0) 06:49:42 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x220f000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty, 0x7}, r1}}, 0x30) 06:49:42 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x38}, [{}]}, 0x58) 06:49:42 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x2) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000040)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x4, @ipv4={[], [], @empty}, 0x8}}}, 0x354) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000002c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10) ioctl$VT_WAITACTIVE(r1, 0x5607) 06:49:42 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r0}}, 0x10) 06:49:42 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x60b1, 0x0) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @multicast1}, 0x1, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)='teql0\x00', 0x20, 0x0, 0x1}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 2140.761481][T24176] sg_write: 13 callbacks suppressed [ 2140.761493][T24176] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2140.761493][T24176] program syz-executor.0 not setting count and/or reply_len properly [ 2140.792189][T24179] FAT-fs (loop1): bogus number of reserved sectors [ 2140.803582][T24179] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) io_setup(0x1, &(0x7f00000000c0)=0x0) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x7de, 0x0) r5 = open(&(0x7f0000000400)='./file0\x00', 0x2, 0x14) r6 = syz_open_dev$dmmidi(&(0x7f00000005c0)='/dev/dmmidi#\x00', 0x7, 0x2402) r7 = eventfd2(0x20, 0x800) io_submit(r2, 0x5, &(0x7f0000000740)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x40, r0, &(0x7f0000000200)="877f3576e5b287f65bc4030be8a9060e68ce0b5ac41f4cd13413a0e64d5b60e10d197ad5dd7e52d667846f44991361b89e6a4f972a8a10f88a96127ffaf076f4d9cf460d31f7de145ceb2a61bbe0d097b0ea01dab551a93f2b56d54e7ab20b69be255aceda6e4d27391e5f2225507b1b49f28eb583434db72a737d464d3ff1b1aebdea942f1d339a445d47bdbb3ccfbcfd00d37cd2e3509f71a1c2d1b8400b014c3aedf849bce9e696fec90612ba4dbce0295db333a01f1a9675ff6fe2ea3eff47d22c11dd7dd0ba75a0324ba875b1fa07b00f61c01f", 0xd6, 0x6823, 0x0, 0x2, r3}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x101, r0, &(0x7f0000000180)="cd207bceb1d0fc", 0x7, 0x20, 0x0, 0x1, r4}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x9e0, r0, &(0x7f0000000480)="3af8c830d8fc1897114f3383483316a787362a5d13ffd06795971fca3e69f4f458876467bc5ad8165faa61edbe57543494ad8b74158ed3454739cfcf8d6227386c6484966a6a7e9ef68d0387e36b91f7e902676123f84f0e848b64e2793baaa801b35aa294c86d7d9dc9f802111771a6d57f6a026fc0217bf092c26c6876be0ea7fca8f52998ace37169a4f2b0d0f012405e86f1733c9648d68b956d2ce3bf4005d02ae7d74b068efebddd3596a7b4", 0xaf, 0x25, 0x0, 0x0, r5}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000000580)="4abfde40a611f8458c45d76b7c8382c84d", 0x11, 0x1, 0x0, 0x0, r6}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f0000000640)="f936a419259b24dd174b919ebdc0e7ff31768929f6e71059c8b2a1c6e92a6b3d3aeb5e171edb21485367fc2626608e59ccd7464aa1742c94952fb19b7ca20e49e3d66dd2eeeee38fa1653f82d5e18e148d775aad8e618d7f7cdad6530af0b633aa38b6f1b397df59aac999c10273818bd113419b16f6ca6a44cdd5269b19dd816bf5", 0x82, 0xff, 0x0, 0x0, r7}]) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000780), 0x111, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) ioctl$RTC_UIE_OFF(r4, 0x7004) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:42 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x38}, [{}]}, 0x58) [ 2140.901317][T24179] FAT-fs (loop1): bogus number of reserved sectors [ 2140.929422][T24179] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2140.945085][T24188] XFS (loop2): Invalid superblock magic number 06:49:42 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) rt_sigaction(0x13, &(0x7f0000000140)={&(0x7f0000000000)="66430f743c28c4217ee6a460c3f40000c4c1fd2b8ca0020000002e660f3806f6c461575f11265e653e66440f3a20b3f7ffffff0bf04728b512290000f2450f79d4f3460f52ad00000080", {0x9}, 0x18000001, &(0x7f00000000c0)="2e642ef346a5c40159d19cf91dfaffffc4c1f97e87a6000000c4414c55c0c441a05805000000000fc76309c4210854e0f3400f6f2844917100"}, &(0x7f0000000240)={&(0x7f0000000180)="c403557b209ec441fd288f49c40000c4c27d33b014f00000c4c359681c46dbc44199688ffff358990f5172fdc4a27da89f050a0000c4c2bdb63ad8d4c4217fe658bf", {}, 0x0, &(0x7f0000000200)="0f01ef67f2af6440d32767460fd4a2000000812645812ca315000000c4e1715dd4c4e1785b53d5de6b92c4c1f970c8462c09"}, 0x8, &(0x7f0000000280)) r1 = accept4(0xffffffffffffff9c, 0x0, &(0x7f00000002c0), 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000300)=0x2, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x11, 0xfa00, {0x0, {0xa, 0x4e24, 0x7, @ipv4={[], [], @empty}, 0x5}, r2}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0), 0x106}}, 0x20) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vfio/vfio\x00', 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x3, 0x4a, 0xcd, 0x9dd1, 0xd, r3, 0xfffffffffffffc00}, 0x2c) socket$pppoe(0x18, 0x1, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0x1, 0x2) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000380)) [ 2140.959215][T24302] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2140.959215][T24302] program syz-executor.0 not setting count and/or reply_len properly 06:49:42 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x2300000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:42 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x38}, [{}]}, 0x58) [ 2141.107816][T24543] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2141.107816][T24543] program syz-executor.0 not setting count and/or reply_len properly [ 2141.140029][T24548] FAT-fs (loop1): bogus number of reserved sectors [ 2141.153125][T24548] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2141.257963][T24548] FAT-fs (loop1): bogus number of reserved sectors [ 2141.265975][T24548] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:43 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x1020, 0x0, 0x0, 0x0, 0x0) 06:49:43 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x6b, "47fc8bb21faae5200d48bb6867738755edbc8a785e149d358133f40ff87a0324c54184c1bb8e7cf128732c5eae003278d64b81d2e5a1a771f1cf972021d196446b7905f300afe317f5fc995aa734963dfbace0bb7d091fe33bedf219be281010c4e302cac99c248d2e6732"}, &(0x7f0000000100)=0x73) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r3, 0x1}, 0x8) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x3) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:49:43 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x38}, [{}]}, 0x58) 06:49:43 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}, r1}}, 0x30) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) tgkill(r2, r2, 0x43) r3 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x6, 0x2000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000180)=[@mss={0x2, 0x1}, @timestamp, @sack_perm, @timestamp], 0x4) 06:49:43 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) dup3(r0, r0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty, 0x6}, r1}}, 0x30) 06:49:43 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x2804000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:43 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x38}, [{}]}, 0x58) [ 2141.903859][T24635] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2141.903859][T24635] program syz-executor.0 not setting count and/or reply_len properly [ 2141.968115][T24638] FAT-fs (loop1): bogus number of reserved sectors [ 2141.986687][T24735] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2141.986687][T24735] program syz-executor.0 not setting count and/or reply_len properly [ 2141.992303][T24638] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:43 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@v1={0x2, "d28669003e1612ea9855295d17b871a177"}, 0x12, 0x3) 06:49:43 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040)=0x33be, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:43 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x38}, [{}]}, 0x58) 06:49:43 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0x6, 0x7}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f0000000480), r1, 0x3}}, 0x18) [ 2142.132768][T24638] FAT-fs (loop1): bogus number of reserved sectors [ 2142.140576][T24724] XFS (loop2): Invalid superblock magic number [ 2142.166144][T24638] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2142.170031][T24869] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; 06:49:44 executing program 3: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x42, 0x0) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{}]}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x4000, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000080)={0xfb2, 0x100, 0x4, 0x1, 0xb25}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000001c0)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x30) [ 2142.170031][T24869] program syz-executor.0 not setting count and/or reply_len properly 06:49:44 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x1802, 0x0, 0x0, 0x0, 0x0) 06:49:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x2904000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x38}, [{}]}, 0x58) 06:49:44 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x0, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1, 0x8}}, 0x10) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) write$selinux_attr(r2, &(0x7f0000000040)='system_u:object_r:modules_dep_t:s0\x00', 0x23) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0)={0x2}, 0x4) 06:49:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x30a01, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000400)=0xc) r3 = open(0x0, 0x80000, 0xa) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r4, 0xa, 0x0) dup2(0xffffffffffffffff, r4) r5 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000880)='/dev/full\x00', 0x105100, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f00000001c0)) syz_open_dev$sndpcmc(&(0x7f0000000800)='/dev/snd/pcmC#D#c\x00', 0x7, 0x4000) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r8 = dup2(r7, r6) ioctl$TIOCSETD(r6, 0x5423, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000840)=0x4, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000003c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000580)}}, 0x10) io_submit(r9, 0x1, &(0x7f0000002800)=[&(0x7f00000027c0)={0x0, 0x0, 0x0, 0x3, 0x6, r2, &(0x7f00000026c0), 0x0, 0x0, 0x0, 0x0, r7}]) ioctl$TIOCLINUX7(r6, 0x541c, &(0x7f0000000540)={0x7, 0x7fffffff}) io_setup(0xd, 0x0) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000040)) ppoll(&(0x7f0000000280)=[{}, {0xffffffffffffffff, 0x108}, {r5, 0x20}, {r7, 0x2}, {r4, 0xa021}, {r8, 0x4}, {0xffffffffffffffff, 0x400}, {}], 0x8, &(0x7f0000000340), &(0x7f0000000380)={0x4}, 0x8) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x2, r1, 0x0, 0x0, 0x1}}, 0x20) [ 2143.045803][T25087] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2143.045803][T25087] program syz-executor.0 not setting count and/or reply_len properly [ 2143.076500][T25097] FAT-fs (loop1): bogus number of reserved sectors 06:49:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x38}, [{}]}, 0x58) [ 2143.100013][T25097] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x100, @mcast1}, r1}}, 0x30) [ 2143.159803][T25250] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2143.159803][T25250] program syz-executor.0 not setting count and/or reply_len properly 06:49:45 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3f, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000140)="1a0f25f001e0a60550dc1eacb6fbb158e2e8578bf58d7584375c1feefa1f79f1fbee1bab6e6fbae7089f45e026ef4522089ec7266dff716669ed68e361efbccef3cfda5652b5933abd972a8c27dda83779d1d28ec997e52bd278839a66695c52c4e99d29905680ea78a55d9c13ef07125dffbf398014d28b303c8fcf530e13e618b3dbb9b33415b4e84e5d9426b8529179578ae39fa960bd3944cceaf71fadfc820fe95db49867dc44b4b3ecda2c854b2f47f07383fa23df2eed00f25956b71f86f6bb77fff8d50ad9e1db4981adc27cd15798f15d299ee402ccb62eba033fbfbd16c1e351b3e785584ef51e9cdfc194e8929b9fe16f", 0xf6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:45 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x27, 0xfa00, {r1}}, 0xc) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet_dccp_int(r2, 0x21, 0x9, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 2143.213407][T25097] FAT-fs (loop1): bogus number of reserved sectors [ 2143.225279][T25250] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2143.225279][T25250] program syz-executor.0 not setting count and/or reply_len properly [ 2143.242145][T25097] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x38}, [{}]}, 0x58) 06:49:45 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x2a04000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2143.343893][T25252] XFS (loop2): Invalid superblock magic number [ 2143.373677][T25438] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2143.373677][T25438] program syz-executor.0 not setting count and/or reply_len properly [ 2143.431851][T25466] FAT-fs (loop1): bogus number of reserved sectors [ 2143.448324][T25466] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2143.493607][T25466] FAT-fs (loop1): bogus number of reserved sectors [ 2143.511779][T25466] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:46 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x1a03, 0x0, 0x0, 0x0, 0x0) 06:49:46 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x204100, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x4, @local, 0x400000}, r1}}, 0x1d) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000080)) 06:49:46 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x40000007, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x38}, [{}]}, 0x58) 06:49:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000040)=""/41, &(0x7f0000000080)=0x29) 06:49:46 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x2c04000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x38}, [{}]}, 0x58) [ 2144.242479][T25548] FAT-fs (loop1): bogus number of reserved sectors [ 2144.290824][T25548] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x38}, [{}]}, 0x58) 06:49:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:49:46 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = getpid() ptrace$cont(0x20, r1, 0x100, 0x5) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1ff, 0x800) connect$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x9}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2144.382184][T25548] FAT-fs (loop1): bogus number of reserved sectors 06:49:46 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400000, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) [ 2144.431110][T25548] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2144.451485][T25797] XFS (loop2): Invalid superblock magic number 06:49:46 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x2d04000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2144.609899][T26070] FAT-fs (loop1): bogus number of reserved sectors [ 2144.638835][T26070] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2144.687726][T26070] FAT-fs (loop1): bogus number of reserved sectors [ 2144.697761][T26070] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:47 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x2000, 0x0, 0x0, 0x0, 0x0) 06:49:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x38}, [{}]}, 0x58) 06:49:47 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) r3 = getgid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000180)=0xe8) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640)='/proc/capi/capi20ncci\x00', 0x0, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x800080, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="13726f6f746d6f64653d30303030303030303030f6890fa7999db9b0a0", @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB=',max_read=0x0000000000000080,blksize=0x0000000000000800,default_permissions,default_permissions,blksize=0x0000000000001000,blksize=0x0000000000000400,allow_other,appraise,fowner<', @ANYRESDEC=r4, @ANYBLOB=',smackfsroot=,appraise,dont_appraise,fowner=', @ANYRESDEC=r5, @ANYBLOB="2c736d69e275782d2c00"]) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) socket$inet_dccp(0x2, 0x6, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0x2}}, 0x18) getrlimit(0x5, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) 06:49:47 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) r1 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="deb362ea9a62ec5f4ee511b4737f1b87718f07cafb371c9063f253fd1e70d5debd15bc28eaac7c99ee92e99b7d68841ef1e3b58c9344484060fc5b6f2c77ff87105ba4c38cd93dcd90900a50879693267e9798fcc5ddd09a54740a6db36dc62595ac27bba33740a9c1a8cc26e685a976d7d6ba128cfdd4fde88d047122ede8fa31e3681eebeae349a63ac93c1bd379bed4fd91cd2fc7a03d3b14cb37f462401cc21bbfccfa56edac3a85abe64e741c301a398540ab727949", 0xb8, 0xfffffffffffffffb) r2 = request_key(&(0x7f0000000380)='pkcs7_test\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='cpuset(\x00', 0xfffffffffffffffd) keyctl$negate(0xd, r1, 0x7fff, r2) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80000, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000200)) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0) sendto$rose(r4, &(0x7f0000000140)="08bc5ee266eaf7aa87f14329199721c015aa301864ed14cc60a52f1760b732ead814fc2e7b5a987148d7f9981ceec34a045d3777259478ab24a467479297680fb93d0b82d7fadb36493a0a039abea732a3c001fddcb98c562361ef7e402e2a68dacc6138d49e9b1bc12e2103afcabb72e1f4b856b452cb4dd645cb55b970bd1f07d2da72892d817d32d7e8f3e9d8178883e48b358d4926c22ecc33f918e2537b", 0xa0, 0x4, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) 06:49:47 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x2e04000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x38}, [{}]}, 0x58) 06:49:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) socket$inet_dccp(0x2, 0x6, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0x2}}, 0x18) getrlimit(0x5, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) [ 2145.339497][T26117] FAT-fs (loop1): bogus number of reserved sectors [ 2145.358768][T26117] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:47 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) r1 = openat$vcs(0xffffffffffffff9c, 0xfffffffffffffffe, 0x200002, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f00000005c0)={@loopback, @broadcast, 0x0}, &(0x7f0000000600)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000640)={@loopback, 0x1d, r2}) 06:49:47 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = msgget(0x3, 0xc0) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000040)=""/153) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x642ac2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x30) 06:49:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x38}, [{}]}, 0x58) [ 2145.466381][T26117] FAT-fs (loop1): bogus number of reserved sectors [ 2145.479568][T26117] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x38}, [{}]}, 0x58) [ 2145.574983][T26308] XFS (loop2): Invalid superblock magic number 06:49:48 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x2010, 0x0, 0x0, 0x0, 0x0) 06:49:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) socket$inet_dccp(0x2, 0x6, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0x2}}, 0x18) getrlimit(0x5, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) 06:49:48 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x2f04000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x40, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:48 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0xb0ad5a1209fa550c) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x100000000, 0xf3bf, "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", 0x14, 0x5, 0xf9, 0x4, 0x1000, 0xf90, 0x5, 0x1}, r3}}, 0x120) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000100)={0x2, 0xffffffc7, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000000c0)={0xfffffffffffffc00, 0x69e, 0x7, 0x1, 0x7, 0x80000000}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000340)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000380)=r4) 06:49:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x38}, [{}]}, 0x58) [ 2146.417251][T26466] sg_write: 12 callbacks suppressed [ 2146.417276][T26466] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2146.417276][T26466] program syz-executor.0 not setting count and/or reply_len properly 06:49:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x38}, [{}]}, 0x58) [ 2146.484206][T26468] FAT-fs (loop1): bogus number of reserved sectors [ 2146.519034][T26468] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2146.526165][T26496] Unknown ioctl 29753 06:49:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1}}, 0x7) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x20, 0x20800) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key(&(0x7f0000000200)='ceph\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f00000003c0)="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", 0x1000, 0xfffffffffffffff9) keyctl$search(0xa, r3, &(0x7f0000000180)='.request_key_auth\x00', &(0x7f00000001c0)={'syz', 0x1}, r4) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:48 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2042, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2146.590643][T26468] FAT-fs (loop1): bogus number of reserved sectors [ 2146.609823][T26659] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2146.609823][T26659] program syz-executor.0 not setting count and/or reply_len properly [ 2146.612676][T26468] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) socket$inet_dccp(0x2, 0x6, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0x2}}, 0x18) getrlimit(0x5, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) [ 2146.663110][T26535] XFS (loop2): Invalid superblock magic number 06:49:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x30) 06:49:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x38}, [{}]}, 0x58) [ 2146.797587][T26759] Unknown ioctl -2138810781 [ 2146.813803][T26808] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2146.813803][T26808] program syz-executor.0 not setting count and/or reply_len properly [ 2146.850443][T26810] Unknown ioctl -2138810781 06:49:49 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x2300, 0x0, 0x0, 0x0, 0x0) 06:49:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x3004000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:49 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000180)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1}, 0x2) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={@default, @null, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast]}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/sockstat6\x00') setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000340)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000280)={0x6, 0x2, 0x7, 'queue0\x00', 0x4}) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x5}}}, 0xfffffffffffffed6) 06:49:49 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) socket$inet_dccp(0x2, 0x6, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0x2}}, 0x18) getrlimit(0x5, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) 06:49:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x38}, [{}]}, 0x58) [ 2147.463221][T26827] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2147.463221][T26827] program syz-executor.0 not setting count and/or reply_len properly [ 2147.494239][T26828] FAT-fs (loop1): bogus number of reserved sectors [ 2147.510659][T26828] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:49 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) 06:49:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x38}, [{}]}, 0x58) [ 2147.594989][T26828] FAT-fs (loop1): bogus number of reserved sectors [ 2147.622475][T26828] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) [ 2147.639196][T27102] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2147.639196][T27102] program syz-executor.0 not setting count and/or reply_len properly 06:49:49 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) socket$inet_dccp(0x2, 0x6, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0x2}}, 0x18) getrlimit(0x5, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) 06:49:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x3104000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2147.706086][T26967] XFS (loop2): Invalid superblock magic number 06:49:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x38}, [{}]}, 0x58) [ 2147.826108][T27265] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2147.826108][T27265] program syz-executor.0 not setting count and/or reply_len properly [ 2147.888796][T27266] FAT-fs (loop1): bogus number of reserved sectors [ 2147.913487][T27266] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2147.977749][T27266] FAT-fs (loop1): bogus number of reserved sectors [ 2147.984299][T27266] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:50 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x3401, 0x0, 0x0, 0x0, 0x0) 06:49:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7f85, 0x80) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000080)={0x2d}) 06:49:50 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x80000, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000280)="08cf1b1a175b81d78b5493c8416228a61f4d6ee814a591d13b8ff2b0f8264b838dd9b1714b03af01673728512f18c76168e92223891620d884b9291f9861d9a202f89802e2763f4385904df39b6f7b4f7c6524bd790fcf7cf4646c5175fc6f521fb219ef0313d59bff86bf47e7f82a0aab8b648f11b34cee2867884a5f338806a7b2cf26f7500164c0b4cfc5da91f0aed38292457c9a26901ca0a01acdd5bb") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x410000, 0x0) r4 = syz_open_pts(0xffffffffffffff9c, 0x200002) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000380)={0x9, 0x2, 0x0, [{0x4, 0x404f, 0x0, 0x8000, 0x1, 0x2, 0x85}, {0x2, 0x200, 0x9, 0xf3, 0x2, 0x1}]}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3, 0x7, [0xfff, 0x8, 0x0, 0x6, 0x1, 0x101, 0x7d]}, &(0x7f00000001c0)=0x16) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000200)={r5, 0x3, 0x7, [0x3, 0xae7, 0x9, 0x59fb, 0x7, 0x45e5, 0x6]}, 0x16) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)=0x0) ioprio_set$pid(0x2, r6, 0xbbd6) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x12) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000100)) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video36\x00', 0x2, 0x0) 06:49:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) socket$inet_dccp(0x2, 0x6, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) 06:49:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x38}, [{}]}, 0x58) 06:49:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x3e26000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2148.556146][T27281] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2148.556146][T27281] program syz-executor.0 not setting count and/or reply_len properly [ 2148.600360][T27282] FAT-fs (loop1): bogus number of reserved sectors [ 2148.616753][T27281] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2148.616753][T27281] program syz-executor.0 not setting count and/or reply_len properly [ 2148.625744][T27282] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x38}, [{}]}, 0x58) 06:49:50 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x12ef, 0xfa00, {0x0, 0x0, 0x106, 0x100004000000b}}, 0xab91) fcntl$getflags(r0, 0x408) prctl$PR_GET_THP_DISABLE(0x2a) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x1c, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x2, {0xa, 0x4e24, 0x200, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x420}, r1}}, 0x38) [ 2148.746192][T27282] FAT-fs (loop1): bogus number of reserved sectors [ 2148.752708][T27282] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2148.806135][T27581] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2148.806135][T27581] program syz-executor.0 not setting count and/or reply_len properly 06:49:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x3f00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x38}, [{}]}, 0x58) 06:49:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) socket$inet_dccp(0x2, 0x6, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) [ 2148.884920][T27414] XFS (loop2): Invalid superblock magic number [ 2148.953419][T27686] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2148.953419][T27686] program syz-executor.0 not setting count and/or reply_len properly [ 2149.043980][T27722] FAT-fs (loop1): bogus number of reserved sectors [ 2149.050738][T27722] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2149.082591][T27722] FAT-fs (loop1): bogus number of reserved sectors [ 2149.094944][T27722] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:51 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x3f00, 0x0, 0x0, 0x0, 0x0) 06:49:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = dup3(r0, r0, 0x80000) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000040)={0x9a, {0xae, 0x5, 0x100, 0x81, 0xfe, 0x10000}}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='statm\x00') ioctl$KDSKBLED(r0, 0x4b65, 0x7fffffff) mknod(&(0x7f00000003c0)='./file0\x00', 0x1440, 0xff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0x2}}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000080)=0x4) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x4, 0x4) fsync(r2) 06:49:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x38}, [{}]}, 0x58) 06:49:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) socket$inet_dccp(0x2, 0x6, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) 06:49:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x38}, [{}]}, 0x58) [ 2149.817198][T27741] FAT-fs (loop1): bogus number of reserved sectors [ 2149.825897][T27741] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:51 executing program 3: stat(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0xe8) fstat(0xffffffffffffff9c, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000007c0)=[0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee01]) getgroups(0x2, &(0x7f0000000800)=[0xee01, 0xee01]) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f00000009c0)={{}, {0x1, 0x7}, [{0x2, 0x4, r0}, {0x2, 0x7, r1}, {0x2, 0x2, r2}, {0x2, 0x1, r3}], {0x4, 0x2}, [{0x8, 0x5, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x2, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}], {0x10, 0x1}, {0x20, 0x6}}, 0x74, 0x1) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r10, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r11}}, 0x10) r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400, 0x0) ioctl$EVIOCGMASK(r12, 0x80104592, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000080)="524aa79f"}) getsockopt$MISDN_TIME_STAMP(r12, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000180)=0xfffffffffffffde1) write$RDMA_USER_CM_CMD_BIND_IP(r10, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r11}}, 0x30) setxattr$security_smack_entry(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.SMACK64\x00', &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x18, 0x2) 06:49:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x38}, [{}]}, 0x58) [ 2149.919692][T27741] FAT-fs (loop1): bogus number of reserved sectors [ 2149.948309][T27741] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:51 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) perf_event_open(&(0x7f0000000140)={0x7, 0x70, 0x1, 0x1, 0x9, 0xff, 0x0, 0x4, 0x20812, 0x9, 0x7, 0x2, 0x0, 0x0, 0x3, 0x3, 0x20, 0xfffffffffffffffd, 0xc7, 0x10001, 0x0, 0x736, 0x400, 0x9, 0x7ff, 0x0, 0x1, 0x0, 0x5, 0x9, 0x6, 0x1, 0x8, 0x6, 0x0, 0x2, 0x9, 0xff, 0x0, 0x2, 0x1, @perf_config_ext={0x8, 0x2c6ca97a}, 0x1018, 0xc00000000000, 0x81, 0x7, 0x1, 0x2, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x1000000, 0x4) 06:49:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x4800000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) socket$inet_dccp(0x2, 0x6, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) [ 2150.045940][T27877] XFS (loop2): Invalid superblock magic number [ 2150.165226][T28078] FAT-fs (loop1): bogus number of reserved sectors [ 2150.172314][T28078] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2150.249519][T28078] FAT-fs (loop1): bogus number of reserved sectors [ 2150.258849][T28078] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:52 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) 06:49:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x38}, [{}]}, 0x58) 06:49:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0xffffffffffffff98) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:52 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) 06:49:52 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1db0, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x5e4, 0x30, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [{0x10c, 0x1, @m_sample={0x108, 0xb, {{0xc, 0x1, 'sample\x00'}, {0x3c, 0x2, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x4, 0x2, 0x10001, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xff, 0x3, 0x0, 0x8000, 0x4}}]}, {0xb8, 0x6, "bc7e5f7ad754c2b13b2fc764fb875be8fad62631b7b672c7c577820700b267bfde1a6f77cb997f43b5e05cf50f1fc010a605b04a125831b482275529ffc3bcf38f235db83901d7fc84f6e88d082e42504883f8e8cd89c8ca68e7b78992b18a402d037d75ec7f1bccc8c190c509d0689c962af4901587d1236f51d245a7f2650c7c78f58e99899cb22ee9885a68df33310e5409441664f515f5e933ceed8669a72269e20c726790fbca14bab34661d81684"}}}}, {0xa0, 0x1, @m_nat={0x9c, 0x10, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{0x3b1, 0x1, 0x6, 0x3, 0xff}, @local, @empty}}}, {0x60, 0x6, "e2c9758a49ab97bda793a9b519ec672774fa3fa04182c812fc1cc76c4534f4b34b6ba3ceae5e9833991080a8ce9aa05fb7057abaadb8b9e76992a7a88f891a80b6cd0f44aab3586d9f0da5cc73a7861e07bb8c828b5c868c86"}}}}, {0x144, 0x1, @m_ife={0x140, 0x12, {{0x8, 0x1, 'ife\x00'}, {0x84, 0x2, [@TCA_IFE_SMAC={0xc, 0x4, @broadcast}, @TCA_IFE_SMAC={0xc, 0x4, @broadcast}, @TCA_IFE_METALST={0x44, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_PRIO={0x8, 0x3, @val=0x20}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x8, 0x5, @val=0xdf}, @IFE_META_TCINDEX={0x8, 0x5, @val=0x1}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x8, 0x5, @val=0x9}, @IFE_META_TCINDEX={0x8, 0x5, @val=0x3}]}, @TCA_IFE_SMAC={0xc}, @TCA_IFE_TYPE={0x8, 0x5, 0x4}, @TCA_IFE_TYPE={0x8, 0x5, 0xfb}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xac, 0x6, "8c9e483f463d97023c05f8ce6b0bec8b2eadf4f3b1db9df9035aa64a5661ab5d6354f7209809163257fe0ff60ccab31c755330bce44c76f77eeffe67970234655575483b329e85cb01883f9f6da044c3ea877730b2058521cf988d5330c04bc4f7f268e54527f061589d088ef9a5ab2cb769875521a450e2f992a6943bdb5122657f3d1df00a6d5417a06adb3519ac07c62701b634e417b9b7c17324fc3df9ba463109b074db91"}}}}, {0x134, 0x1, @m_csum={0x130, 0x0, {{0xc, 0x1, 'csum\x00'}, {0x20, 0x2, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0x7dae5ff4, 0x7, 0x6045, 0xffffffff80000000}, 0x67}}}, {0xfc, 0x6, "e7984309043eff83e06ae8ad5039165eb37c760dae3158b1fedf778de0472f00a717645f621790a9ff9bedfd26f2d87c6fa46a49a0746cd10811a57eb9c598aa59ab38ef08a49a730e7da45f8ac86376b2f3f8d552f4697ef1bc7968059ca5025b19472b1203ecba59967b5f7fd958dd9ac810886f998bad3047946effcf76c60814c3ada6f6fadec1aed099dc82deef2c464573838d9f767e41ff0a14c15eb3d570b0e16e407aee5412c31b45c166bc490658416cdbdf4ea1a9cf6f86854950622f4cc261a8f177417d8faf775e541cd9162961e1bb2c4950b55d5ac4c65114e5b01a8a97b9fa39512b37bcf4f4dd9a8e4c2dc199"}}}}, {0x78, 0x1, @m_sample={0x74, 0x17, {{0xc, 0x1, 'sample\x00'}, {0x1c, 0x2, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x200}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x100000000}]}, {0x44, 0x6, "ca280cfa8b056cc76e39d60d5b3f7c3632cdcc277cee2947e3e424741064627acdd9d0318a892643626e943e895f828e40c3c1798ccb96c6a00ffd45710e483f"}}}}, {0x134, 0x1, @m_vlan={0x130, 0x7, {{0xc, 0x1, 'vlan\x00'}, {0x64, 0x2, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0xffff, 0x0, 0x800, 0x4}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0x905}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x8, 0x6, 0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3f, 0xffffffffffffffe1, 0x2, 0x1, 0x1}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x8, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0x6e9}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x8, 0x6, 0x4}]}, {0xb8, 0x6, "1611ed2674d0f7c624b6f0a6f3364ad8d9a47dc69e5e4704b185dc25da21534aa072714117b5f7cd544ab990dcd2f31f0e1cdda20e314f9a881976e06f9340d698d9d6eade7b74a8b4a12c4a3de9206c7d082534db52d8e6fb0c74bc1587fc32bc6e66971e90a3854f7841d561a3c16250a45512eaa2b0fe0af2a3859b3eb02a930d36a47db33cda89e4243d6d9e47f499f0748a9cfea2a0f32d0a5252443d2277e52a8e88c1217c286f4dbcc7a112745cc073eb"}}}}]}, 0x5e4}}, 0x20008000) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:52 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x4c00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x38}, [{}]}, 0x58) 06:49:52 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:49:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0xa5, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xfffffffffffffffc}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) [ 2151.014555][T28201] FAT-fs (loop1): bogus number of reserved sectors 06:49:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x38}, [{}]}, 0x58) [ 2151.064603][T28201] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:52 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x117, 0xf}}, 0x20) r2 = fcntl$dupfd(r0, 0x406, r0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x224001, 0x0) renameat(r2, &(0x7f0000000200)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, r1, 0x30, 0x1, @in6={0xa, 0x4e24, 0x400, @dev={0xfe, 0x80, [], 0x24}}}}, 0xa0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:52 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2151.170187][T28201] FAT-fs (loop1): bogus number of reserved sectors [ 2151.186825][T28272] XFS (loop2): Invalid superblock magic number [ 2151.195095][T28201] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:53 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x4001, 0x0, 0x0, 0x0, 0x0) 06:49:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x38}, [{}]}, 0x58) 06:49:53 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x202, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x4, 0x20, 0x2, 0x7f}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r1, 0x7, 0x4, [0x5, 0xf0c8, 0x4, 0x101]}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x80000, 0x0) sendmsg$nl_crypto(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=@alg={0xe8, 0x10, 0x2, 0x70bd28, 0x25dfdbff, {{'rfc4106(aegis128-aesni)\x00'}, [], [], 0x2400, 0x2400}, [{0x8, 0x1, 0x3}]}, 0xe8}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x181, 0xfa00, {r4, 0x8000000000000}}, 0xffffffffffffff4d) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, r4}}, 0x30) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000040)=0xfffffffffffeffff) 06:49:53 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x6000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:53 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:49:53 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80, 0x0) r1 = getuid() getresgid(&(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000140)) write$FUSE_ENTRY(r0, &(0x7f0000000180)={0x90, 0x0, 0x2, {0x0, 0x3, 0xfffffffffffffff9, 0x6, 0xfffffffffffffffe, 0x884, {0x4, 0x6, 0x5, 0xffffffffffffffc0, 0x80, 0x1, 0xfffffffffffffff8, 0x1, 0x20, 0x7, 0x0, r1, r2, 0x7f, 0x8}}}, 0x90) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2151.943891][T28455] sg_write: 7 callbacks suppressed [ 2151.943914][T28455] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2151.943914][T28455] program syz-executor.0 not setting count and/or reply_len properly [ 2151.981189][T28453] FAT-fs (loop1): bogus number of reserved sectors [ 2151.992074][T28453] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x38}, [{}]}, 0x58) [ 2152.078067][T28453] FAT-fs (loop1): bogus number of reserved sectors [ 2152.096246][T28453] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:54 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) 06:49:54 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x6800000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e24, 0x1f, @loopback, 0x9}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x10001, @mcast1, 0x7ff}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21, @rand_addr=0x7f}], 0xa8) 06:49:54 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x400000000, 0x0, 0x10a, 0x1000}}, 0xffffffffffffffa0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x23, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2152.172308][T28770] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2152.172308][T28770] program syz-executor.0 not setting count and/or reply_len properly [ 2152.249153][T28675] XFS (loop2): Invalid superblock magic number [ 2152.275872][T28780] FAT-fs (loop1): bogus number of reserved sectors 06:49:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x275) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x48) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000080)={0xf000, 0x7001, 0x1, 0x0, 0x31}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000000c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) [ 2152.296367][T28780] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2152.368276][T28780] FAT-fs (loop1): bogus number of reserved sectors [ 2152.377142][T28780] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x38}, [{}]}, 0x58) 06:49:54 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r0, 0x1}}, 0x18) 06:49:54 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x103, 0x1002}}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40, 0x0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000140)={"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"}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000000)=0xff) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:54 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x4700, 0x0, 0x0, 0x0, 0x0) 06:49:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x400000) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000080)=0xffffffffffffffb3) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:54 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x6c00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:54 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r0, 0x1}}, 0x18) [ 2152.996257][T28911] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2152.996257][T28911] program syz-executor.0 not setting count and/or reply_len properly 06:49:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1, 0x4}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x38}, [{}]}, 0x58) [ 2153.061889][T28912] FAT-fs (loop1): bogus number of reserved sectors [ 2153.083319][T28912] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00') write$P9_RLOPEN(r2, &(0x7f0000000240)={0x18, 0xd, 0x1, {{0x40, 0x1, 0x2}, 0x4}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x400, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0xc00, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'ib', 0x3a, 'bcsf0\x00'}}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004804) 06:49:55 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x5) [ 2153.172550][T28912] FAT-fs (loop1): bogus number of reserved sectors [ 2153.183385][T29035] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2153.183385][T29035] program syz-executor.0 not setting count and/or reply_len properly 06:49:55 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r0, 0x1}}, 0x18) [ 2153.229340][T28912] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xbfffffff, 0x0, 0x38}, [{}]}, 0x58) 06:49:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x7400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2153.279926][T28985] XFS (loop2): Invalid superblock magic number 06:49:55 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r0}}, 0x10) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="bc04b8c33789cced826116cbbf90a2b80e01f6597269ed59e557770dc1bbb72bedaf45abc52dcdf684c291421df2a9b4eebd600379a44b57e1ae8bc5fc74be171669221059869771b3fc4441156d80c6526e6e7f951bcbb7dd07cdf97042be8f0893fd4737c30bedf59ae128e867c1d71b152c61fe0712ca2b0a7a226e7b4b5c985989eee7d732af638df7621a5265ba924874d0a11a6fe1431f0bba7b9ba77a49dadfecc21011650b211c4a25ca555f69a5ed84ba2306afe79da53cc1363d40a3a60732c2712c7298bd88415ba3c12b147256864941d04387929c5206835bc335c44c77d69a96ad", 0xfffffffffffffe43, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200)={r1, 0x65b, 0x33}, &(0x7f00000003c0)=ANY=[@ANYBLOB="656e633d6f616570206861736800737472652a3389f437650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ed314c7ac151e155"], &(0x7f00000002c0)="35833d5479f3cf6bf7d2b3788b86d9ab9d163fe0932425edd4b9b650c3aa61e03f19a9837f48247511bd0f0c00711b5594ff37b6f707cb820a1108963240f3e3a5", &(0x7f0000000480)="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") write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r0}}, 0x30) [ 2153.372085][T29155] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2153.372085][T29155] program syz-executor.0 not setting count and/or reply_len properly [ 2153.444048][T29160] FAT-fs (loop1): bogus number of reserved sectors [ 2153.482311][T29160] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2153.534323][T29160] FAT-fs (loop1): bogus number of reserved sectors [ 2153.547892][T29160] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:55 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x4800, 0x0, 0x0, 0x0, 0x0) 06:49:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) 06:49:55 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xffffffff, 0x8801) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000240)=0x2, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x4, r2, 0x3c, 0x1, @in6={0xa, 0x4e21, 0x7, @local, 0x7}}}, 0xa0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0xfffffffffffffe10, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) 06:49:55 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), &(0x7f00000025c0)=0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) r4 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x3, 0x24100) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='vmnet0GPL{\x00') write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x30) 06:49:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbf, 0x0, 0x38}, [{}]}, 0x58) 06:49:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x7826000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2154.003293][T29176] FAT-fs (loop1): bogus number of reserved sectors [ 2154.010072][T29186] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2154.010072][T29186] program syz-executor.0 not setting count and/or reply_len properly [ 2154.037609][T29176] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) 06:49:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x6, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 06:49:55 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) write$P9_RFSYNC(r0, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000140)={r1, 0x14}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x6, 0x400000) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) [ 2154.117655][T29186] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2154.117655][T29186] program syz-executor.0 not setting count and/or reply_len properly [ 2154.156166][T29176] FAT-fs (loop1): bogus number of reserved sectors 06:49:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) [ 2154.192503][T29176] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x38}, [{}]}, 0x58) 06:49:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xa) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000040)={@rand_addr, @remote}, &(0x7f0000000080)=0xc) setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000140)=0x965, 0x4) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="b3000000cbc0412d9da46697e8dd02fd7395ae651064f0ee4470c0bd63c241442b7db2f7662200cf8b1749271e83bd0359fea2c4a89c878353dbca4c619e754eb1b10f4b2ed6228a5c5040d4b1a14f22ef8d7df0ac431e78e3ebe081147854be4da46d2b5f2f1a3004a0457167918955c5824397df8ec827ae08c14a1ae443ab2b7b307b30e0652e2187536bd4b352293850b9eeb348bd4d615a6ec8aed247988e8601bc5861e7398f0057c6595a0cd80e1cdaaa3e8d95"], &(0x7f00000000c0)=0xbb) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r3, 0x1}, 0x8) [ 2154.262524][T29286] XFS (loop2): Invalid superblock magic number [ 2154.362418][T29413] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2154.362418][T29413] program syz-executor.0 not setting count and/or reply_len properly 06:49:56 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x4801, 0x0, 0x0, 0x0, 0x0) 06:49:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x7926000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:56 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xc5df, 0x101000) 06:49:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) 06:49:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x38}, [{}]}, 0x58) 06:49:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {r1, 0xc0, '9cK', "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"}}, 0x110) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) [ 2155.042987][T29533] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2155.042987][T29533] program syz-executor.0 not setting count and/or reply_len properly 06:49:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x38}, [{}]}, 0x58) [ 2155.112163][T29531] FAT-fs (loop1): bogus number of reserved sectors 06:49:57 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x9}}}, 0x30) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r1, &(0x7f0000002ec0)={'3! ', './file0'}, 0x584) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000004700)='/dev/sequencer2\x00', 0x41, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000004740)=0x8000, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in6={0xa, 0x4e22, 0x9, @remote, 0x7d7b}}}, 0x90) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000000)=0x8000, 0x8) [ 2155.157432][T29531] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000000c0)={0x9e0000, 0x858, 0x5, [], &(0x7f0000000080)={0x990a6a, 0xfbfa, [], @value64=0x8000}}) 06:49:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) [ 2155.243624][T29753] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2155.243624][T29753] program syz-executor.0 not setting count and/or reply_len properly [ 2155.264812][T29681] XFS (loop2): Invalid superblock magic number 06:49:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x38}, [{}]}, 0x58) 06:49:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) [ 2155.324371][T29531] FAT-fs (loop1): bogus number of reserved sectors [ 2155.354850][T29531] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:57 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x4900, 0x0, 0x0, 0x0, 0x0) 06:49:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x38}, [{}]}, 0x58) 06:49:57 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x7a00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = dup(r0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x0, 0x2710}, 0x0, 0x1, 0x7}, {{r2, r3/1000+10000}, 0x1f, 0x6, 0x7fff}, {{}, 0x17, 0xffffffffffffff1c, 0x5}, {{0x0, 0x7530}, 0x17, 0x15ff, 0xffffffff}, {{0x77359400}, 0x12, 0x8000000, 0x8}, {{0x77359400}, 0x15, 0x8}], 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x30) 06:49:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:49:57 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x30) 06:49:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x38}, [{}]}, 0x58) 06:49:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2156.151288][T29885] Unknown ioctl -2138810781 [ 2156.170923][T29888] FAT-fs (loop1): bogus number of reserved sectors 06:49:58 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) socket$inet_dccp(0x2, 0x6, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0x2}}, 0x18) getrlimit(0x5, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) [ 2156.252197][T29888] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2156.306563][T29929] XFS (loop2): Invalid superblock magic number 06:49:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x100, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) setsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000240)={@mcast2, r3}, 0x14) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) [ 2156.360129][T29888] FAT-fs (loop1): bogus number of reserved sectors [ 2156.382427][T29888] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:58 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) socket$inet_dccp(0x2, 0x6, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0x2}}, 0x18) getrlimit(0x5, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) 06:49:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x38}, [{}]}, 0x58) 06:49:58 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x4a00, 0x0, 0x0, 0x0, 0x0) 06:49:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:49:58 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x7fffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:49:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = dup(r0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x0, 0x2710}, 0x0, 0x1, 0x7}, {{r2, r3/1000+10000}, 0x1f, 0x6, 0x7fff}, {{}, 0x17, 0xffffffffffffff1c, 0x5}, {{0x0, 0x7530}, 0x17, 0x15ff, 0xffffffff}, {{0x77359400}, 0x12, 0x8000000, 0x8}, {{0x77359400}, 0x15, 0x8}], 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x30) 06:49:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x38}, [{}]}, 0x58) 06:49:58 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) socket$inet_dccp(0x2, 0x6, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0x2}}, 0x18) getrlimit(0x5, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) [ 2157.061181][T30040] sg_write: 6 callbacks suppressed [ 2157.061195][T30040] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2157.061195][T30040] program syz-executor.0 not setting count and/or reply_len properly [ 2157.094656][T30034] FAT-fs (loop1): bogus number of reserved sectors 06:49:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x38}, [{}]}, 0x58) [ 2157.118398][T30034] FAT-fs (loop1): Can't find a valid FAT filesystem 06:49:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x38}, [{}]}, 0x58) 06:49:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) [ 2157.205641][T30034] FAT-fs (loop1): bogus number of reserved sectors [ 2157.218560][T30034] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2157.240545][T30054] XFS (loop2): Invalid superblock magic number 06:49:59 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) socket$inet_dccp(0x2, 0x6, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r1, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) 06:49:59 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x8000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2157.275109][T30164] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2157.275109][T30164] program syz-executor.3 not setting count and/or reply_len properly [ 2157.293222][T30163] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2157.293222][T30163] program syz-executor.0 not setting count and/or reply_len properly 06:49:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x38}, [{}]}, 0x58) [ 2157.411243][T30167] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2157.411243][T30167] program syz-executor.0 not setting count and/or reply_len properly [ 2157.449889][T30171] FAT-fs (loop1): bogus number of reserved sectors [ 2157.473100][T30171] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2157.544820][T30171] FAT-fs (loop1): bogus number of reserved sectors [ 2157.559149][T30171] FAT-fs (loop1): Can't find a valid FAT filesystem 06:50:00 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x4c00, 0x0, 0x0, 0x0, 0x0) 06:50:00 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) write$P9_RREAD(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="8a0000007502007f00000098dd890c2fa815cc99d197fd24e3dc44d875ee12661284944f9a60e45822da4d7114e5d81db2fe9eac64bff95daf997c264d9bd9dc446ee7ff7fbdb2ae4846f290be487982adfa18e0ffbee1a6177b5d36f224ebef36882c00189b7e7b762abaf3037055587ae3bb32e842cbdc25d3278a0c18a885b824f68b361f13a43156"], 0x8a) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0xffffffffffffffdb) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x38}, [{}]}, 0x58) 06:50:00 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) socket$inet_dccp(0x2, 0x6, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) 06:50:00 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x8cffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2158.209013][T30185] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2158.209013][T30185] program syz-executor.0 not setting count and/or reply_len properly 06:50:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) write$P9_RREAD(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="8a0000007502007f00000098dd890c2fa815cc99d197fd24e3dc44d875ee12661284944f9a60e45822da4d7114e5d81db2fe9eac64bff95daf997c264d9bd9dc446ee7ff7fbdb2ae4846f290be487982adfa18e0ffbee1a6177b5d36f224ebef36882c00189b7e7b762abaf3037055587ae3bb32e842cbdc25d3278a0c18a885b824f68b361f13a43156"], 0x8a) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0xffffffffffffffdb) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:00 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) 06:50:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x38}, [{}]}, 0x58) [ 2158.269649][T30193] FAT-fs (loop1): bogus number of reserved sectors [ 2158.307980][T30193] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2158.366503][T30193] FAT-fs (loop1): bogus number of reserved sectors [ 2158.383275][T30193] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2158.391084][T30276] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2158.391084][T30276] program syz-executor.0 not setting count and/or reply_len properly 06:50:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) write$P9_RREAD(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="8a0000007502007f00000098dd890c2fa815cc99d197fd24e3dc44d875ee12661284944f9a60e45822da4d7114e5d81db2fe9eac64bff95daf997c264d9bd9dc446ee7ff7fbdb2ae4846f290be487982adfa18e0ffbee1a6177b5d36f224ebef36882c00189b7e7b762abaf3037055587ae3bb32e842cbdc25d3278a0c18a885b824f68b361f13a43156"], 0x8a) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0xffffffffffffffdb) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:00 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2158.440842][T30219] XFS (loop2): Invalid superblock magic number 06:50:00 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xb400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2158.595949][T30323] FAT-fs (loop1): bogus number of reserved sectors [ 2158.619463][T30323] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2158.686320][T30323] FAT-fs (loop1): bogus number of reserved sectors [ 2158.693039][T30323] FAT-fs (loop1): Can't find a valid FAT filesystem 06:50:01 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x6000, 0x0, 0x0, 0x0, 0x0) 06:50:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) write$P9_RREAD(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="8a0000007502007f00000098dd890c2fa815cc99d197fd24e3dc44d875ee12661284944f9a60e45822da4d7114e5d81db2fe9eac64bff95daf997c264d9bd9dc446ee7ff7fbdb2ae4846f290be487982adfa18e0ffbee1a6177b5d36f224ebef36882c00189b7e7b762abaf3037055587ae3bb32e842cbdc25d3278a0c18a885b824f68b361f13a43156"], 0x8a) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x38}, [{}]}, 0x58) 06:50:01 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:01 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xf125000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r1, 0x0, 0x0, 0x1}}, 0x20) [ 2159.229131][T30336] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2159.229131][T30336] program syz-executor.0 not setting count and/or reply_len properly [ 2159.264235][T30341] FAT-fs (loop1): bogus number of reserved sectors 06:50:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x38}, [{}]}, 0x58) 06:50:01 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2159.343477][T30341] FAT-fs (loop1): Can't find a valid FAT filesystem 06:50:01 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) [ 2159.430676][T30341] FAT-fs (loop1): bogus number of reserved sectors [ 2159.434159][T30366] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2159.434159][T30366] program syz-executor.0 not setting count and/or reply_len properly [ 2159.445942][T30341] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2159.462229][T30349] XFS (loop2): Invalid superblock magic number 06:50:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:02 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x6002, 0x0, 0x0, 0x0, 0x0) 06:50:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x38}, [{}]}, 0x58) 06:50:02 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xf4ffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:02 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r0, 0x1}}, 0x18) 06:50:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r1, 0x0, 0x0, 0x1}}, 0x20) [ 2160.281854][T30390] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2160.281854][T30390] program syz-executor.0 not setting count and/or reply_len properly 06:50:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) 06:50:02 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r0, 0x1}}, 0x18) 06:50:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x38}, [{}]}, 0x58) [ 2160.363968][T30391] FAT-fs (loop1): bogus number of reserved sectors 06:50:02 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r0, 0x1}}, 0x18) [ 2160.416479][T30391] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2160.448953][T30399] XFS (loop2): Invalid superblock magic number 06:50:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) [ 2160.489957][T30415] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2160.489957][T30415] program syz-executor.0 not setting count and/or reply_len properly [ 2160.509740][T30391] FAT-fs (loop1): bogus number of reserved sectors [ 2160.530267][T30391] FAT-fs (loop1): Can't find a valid FAT filesystem 06:50:03 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x6402, 0x0, 0x0, 0x0, 0x0) 06:50:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:03 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) 06:50:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x38}, [{}]}, 0x58) 06:50:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xf5ffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) 06:50:03 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) 06:50:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xbfffffff00000000, 0x0, 0x38}, [{}]}, 0x58) 06:50:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:03 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r0, 0x0, 0x0, 0x1}}, 0x20) [ 2161.377113][T30437] FAT-fs (loop1): bogus number of reserved sectors [ 2161.396520][T30437] FAT-fs (loop1): Can't find a valid FAT filesystem 06:50:03 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) [ 2161.491149][T30437] FAT-fs (loop1): bogus number of reserved sectors [ 2161.503791][T30437] FAT-fs (loop1): Can't find a valid FAT filesystem 06:50:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x38}, [{}]}, 0x58) [ 2161.615153][T30451] XFS (loop2): Invalid superblock magic number [ 2162.009254][T30451] XFS (loop2): Invalid superblock magic number 06:50:04 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r0, 0x0, 0x0, 0x1}}, 0x20) 06:50:04 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) 06:50:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xf6ffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:04 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x6800, 0x0, 0x0, 0x0, 0x0) 06:50:04 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x38}, [{}]}, 0x58) [ 2162.443894][T30486] sg_write: 3 callbacks suppressed [ 2162.443908][T30486] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2162.443908][T30486] program syz-executor.0 not setting count and/or reply_len properly [ 2162.445443][T30483] FAT-fs (loop1): bogus number of reserved sectors [ 2162.481929][T30483] FAT-fs (loop1): Can't find a valid FAT filesystem 06:50:04 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r0, 0x0, 0x0, 0x1}}, 0x20) 06:50:04 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) 06:50:04 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2162.492112][T30486] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2162.492112][T30486] program syz-executor.0 not setting count and/or reply_len properly 06:50:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x38}, [{}]}, 0x58) [ 2162.586145][T30483] FAT-fs (loop1): bogus number of reserved sectors [ 2162.612432][T30483] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2162.626858][T30506] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; 06:50:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r1, 0x0, 0x0, 0x1}}, 0x20) [ 2162.626858][T30506] program syz-executor.0 not setting count and/or reply_len properly 06:50:04 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:04 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) [ 2162.678773][T30493] XFS (loop2): Invalid superblock magic number 06:50:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xf9fdffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r1, 0x0, 0x0, 0x1}}, 0x20) [ 2162.852411][T30524] FAT-fs (loop1): bogus number of reserved sectors [ 2162.890112][T30524] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2162.971338][T30524] FAT-fs (loop1): bogus number of reserved sectors [ 2162.989146][T30524] FAT-fs (loop1): Can't find a valid FAT filesystem 06:50:05 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x6c00, 0x0, 0x0, 0x0, 0x0) 06:50:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x38}, [{}]}, 0x58) 06:50:05 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:05 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:05 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xfbffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:05 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2163.584583][T30543] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2163.584583][T30543] program syz-executor.0 not setting count and/or reply_len properly 06:50:05 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x38}, [{}]}, 0x58) 06:50:05 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2163.655430][T30545] FAT-fs (loop1): bogus number of reserved sectors 06:50:05 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2163.717992][T30545] FAT-fs (loop1): Can't find a valid FAT filesystem 06:50:05 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r1, 0x0, 0x0, 0x1}}, 0x20) [ 2163.768290][T30565] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2163.768290][T30565] program syz-executor.0 not setting count and/or reply_len properly [ 2163.810178][T30545] FAT-fs (loop1): bogus number of reserved sectors [ 2163.821107][T30555] XFS (loop2): Invalid superblock magic number [ 2163.832163][T30545] FAT-fs (loop1): Can't find a valid FAT filesystem 06:50:06 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x1}}, 0x18) 06:50:06 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 06:50:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x38}, [{}]}, 0x58) 06:50:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:06 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x7400, 0x0, 0x0, 0x0, 0x0) 06:50:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xfcfdffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:06 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) [ 2164.599982][T30590] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2164.599982][T30590] program syz-executor.0 not setting count and/or reply_len properly [ 2164.628059][T30590] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2164.628059][T30590] program syz-executor.0 not setting count and/or reply_len properly 06:50:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, [{}]}, 0x58) 06:50:06 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) [ 2164.678258][T30591] FAT-fs (loop1): bogus number of reserved sectors [ 2164.706070][T30591] FAT-fs (loop1): Can't find a valid FAT filesystem 06:50:06 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) [ 2164.742135][T30610] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2164.742135][T30610] program syz-executor.0 not setting count and/or reply_len properly [ 2164.772182][T30591] FAT-fs (loop1): bogus number of reserved sectors [ 2164.780041][T30591] FAT-fs (loop1): Can't find a valid FAT filesystem 06:50:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) 06:50:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xfdfdffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:06 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2164.827806][T30602] XFS (loop2): Invalid superblock magic number 06:50:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38}, [{}]}, 0x58) 06:50:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) [ 2164.938145][T30632] FAT-fs (loop1): bogus number of reserved sectors [ 2164.952847][T30632] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2164.986692][T30637] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2164.986692][T30637] program syz-executor.0 not setting count and/or reply_len properly [ 2165.019438][T30637] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2165.019438][T30637] program syz-executor.0 not setting count and/or reply_len properly [ 2165.038332][T30632] FAT-fs (loop1): bogus number of reserved sectors [ 2165.045051][T30632] FAT-fs (loop1): Can't find a valid FAT filesystem 06:50:07 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) 06:50:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x38}, [{}]}, 0x58) 06:50:07 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x7401, 0x0, 0x0, 0x0, 0x0) 06:50:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) 06:50:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xff0f000000000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:07 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) 06:50:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) 06:50:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x38}, [{}]}, 0x58) [ 2165.645782][T30655] FAT-fs (loop1): bogus number of reserved sectors [ 2165.680505][T30655] FAT-fs (loop1): Can't find a valid FAT filesystem 06:50:07 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2165.764286][T30666] XFS (loop2): Invalid superblock magic number [ 2165.790251][T30655] FAT-fs (loop1): bogus number of reserved sectors 06:50:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x38}, [{}]}, 0x58) 06:50:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) 06:50:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) [ 2165.811851][T30655] FAT-fs (loop1): Can't find a valid FAT filesystem 06:50:07 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:08 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x7403, 0x0, 0x0, 0x0, 0x0) 06:50:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xffffff7f00000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x38}, [{}]}, 0x58) 06:50:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0)}}, 0x18) 06:50:08 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0)}}, 0x18) 06:50:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x38}, [{}]}, 0x58) 06:50:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:08 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2166.648906][T30718] FAT-fs (loop1): bogus number of reserved sectors [ 2166.655470][T30718] FAT-fs (loop1): Can't find a valid FAT filesystem 06:50:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0)}}, 0x18) 06:50:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r1, 0x0, 0x0, 0x1}}, 0x20) [ 2166.747935][T30718] FAT-fs (loop1): bogus number of reserved sectors [ 2166.771681][T30718] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2166.824494][T30724] XFS (loop2): Invalid superblock magic number 06:50:09 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x7a00, 0x0, 0x0, 0x0, 0x0) 06:50:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x38}, [{}]}, 0x58) 06:50:09 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:09 executing program 4: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x6000, 0x0, 0x0, 0x0, 0x0) 06:50:09 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:09 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2167.654810][T30769] sg_write: 5 callbacks suppressed [ 2167.654822][T30769] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2167.654822][T30769] program syz-executor.0 not setting count and/or reply_len properly 06:50:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r1, 0x0, 0x0, 0x1}}, 0x20) [ 2167.723594][T30766] FAT-fs (loop1): bogus number of reserved sectors [ 2167.752156][T30766] FAT-fs (loop1): Can't find a valid FAT filesystem 06:50:09 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x38}, [{}]}, 0x58) 06:50:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x7fff, r1, 0x0, 0x0, 0x1}}, 0x20) [ 2167.822736][T30760] XFS (loop4): Invalid superblock magic number [ 2167.845092][T30766] FAT-fs (loop1): bogus number of reserved sectors [ 2167.870837][T30778] XFS (loop2): Invalid superblock magic number [ 2167.871950][T30766] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2167.889694][T30799] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2167.889694][T30799] program syz-executor.0 not setting count and/or reply_len properly 06:50:09 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x38}, [{}]}, 0x58) 06:50:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffff0700, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) 06:50:10 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 06:50:10 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x7c03, 0x0, 0x0, 0x0, 0x0) 06:50:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:50:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) 06:50:10 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) [ 2168.720393][T30825] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2168.720393][T30825] program syz-executor.0 not setting count and/or reply_len properly [ 2168.740541][T30826] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2168.740541][T30826] program syz-executor.4 not setting count and/or reply_len properly 06:50:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x38}, [{}]}, 0x58) [ 2168.795669][T30827] FAT-fs (loop1): bogus number of reserved sectors [ 2168.826889][T30827] FAT-fs (loop1): Can't find a valid FAT filesystem 06:50:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x10000, 0x101000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x40002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x2}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x20000, 0xe, 0x0, 0x43d, 0x0, 0x0, 0x7ff, 0x6e4dbd44, 0xff, 0x40000, 0x0, 0x2, 0x6, 0x3, 0xc2, 0xffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xf}, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x9) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xd99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000004c0)}, {&(0x7f0000000500)=""/45, 0x2d}, {&(0x7f0000000540)=""/243, 0xf3}, {&(0x7f0000000640)=""/252, 0xfc}, {&(0x7f0000000740)=""/217, 0xd9}, {&(0x7f0000000840)=""/107, 0x6b}, {&(0x7f00000008c0)=""/31, 0x1f}, {&(0x7f0000000900)=""/221, 0xdd}, {&(0x7f0000000a00)=""/245, 0xf5}], 0x9, &(0x7f0000000bc0)=""/101, 0x65}, 0x63) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x14, 0x6, &(0x7f0000000c80)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x54b8, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x9f, 0xb, 0x0, 0x6, 0x50, 0xfffffffffffffff5}, @ldst={0x0, 0x3, 0x2, 0x3, 0xb, 0x138, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000}], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x8c, &(0x7f0000000d00)=""/140, 0x41000, 0x0, [], 0x0, 0x5}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000280)='syz1\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x280100, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac000000000000000000000000", 0x2e}], 0x1}, 0x0) openat$cgroup_type(r2, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) 06:50:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) 06:50:10 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) [ 2168.859461][T30840] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2168.859461][T30840] program syz-executor.0 not setting count and/or reply_len properly 06:50:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x38}, [{}]}, 0x58) [ 2168.929350][T30827] FAT-fs (loop1): bogus number of reserved sectors [ 2168.949986][T30827] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2168.958054][T30834] XFS (loop2): Invalid superblock magic number 06:50:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff7f, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) 06:50:10 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) [ 2169.012100][T30869] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2169.012100][T30869] program syz-executor.0 not setting count and/or reply_len properly [ 2169.127742][T30948] FAT-fs (loop1): bogus number of reserved sectors [ 2169.164346][T30948] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2169.256081][T30948] FAT-fs (loop1): bogus number of reserved sectors [ 2169.266279][T30948] FAT-fs (loop1): Can't find a valid FAT filesystem 06:50:11 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x8e03, 0x0, 0x0, 0x0, 0x0) 06:50:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x38}, [{}]}, 0x58) 06:50:11 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) 06:50:11 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) 06:50:11 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x10000, 0x101000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x40002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x2}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x20000, 0xe, 0x0, 0x43d, 0x0, 0x0, 0x7ff, 0x6e4dbd44, 0xff, 0x40000, 0x0, 0x2, 0x6, 0x3, 0xc2, 0xffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xf}, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x9) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xd99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000004c0)}, {&(0x7f0000000500)=""/45, 0x2d}, {&(0x7f0000000540)=""/243, 0xf3}, {&(0x7f0000000640)=""/252, 0xfc}, {&(0x7f0000000740)=""/217, 0xd9}, {&(0x7f0000000840)=""/107, 0x6b}, {&(0x7f00000008c0)=""/31, 0x1f}, {&(0x7f0000000900)=""/221, 0xdd}, {&(0x7f0000000a00)=""/245, 0xf5}], 0x9, &(0x7f0000000bc0)=""/101, 0x65}, 0x63) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x14, 0x6, &(0x7f0000000c80)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x54b8, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x9f, 0xb, 0x0, 0x6, 0x50, 0xfffffffffffffff5}, @ldst={0x0, 0x3, 0x2, 0x3, 0xb, 0x138, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000}], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x8c, &(0x7f0000000d00)=""/140, 0x41000, 0x0, [], 0x0, 0x5}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000280)='syz1\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x280100, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac000000000000000000000000", 0x2e}], 0x1}, 0x0) openat$cgroup_type(r2, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) 06:50:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2169.732973][T30982] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2169.732973][T30982] program syz-executor.0 not setting count and/or reply_len properly 06:50:11 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) 06:50:11 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) [ 2169.773448][T30987] FAT-fs (loop1): bogus number of reserved sectors [ 2169.798561][T30987] FAT-fs (loop1): Can't find a valid FAT filesystem 06:50:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x38}, [{}]}, 0x58) [ 2169.864965][T30987] FAT-fs (loop1): bogus number of reserved sectors [ 2169.874126][T30987] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2169.883133][T30985] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 06:50:11 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2169.955357][T30994] XFS (loop2): Invalid superblock magic number 06:50:11 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0)}}, 0x18) [ 2170.002990][T31036] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2170.002990][T31036] program syz-executor.0 not setting count and/or reply_len properly 06:50:12 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xc000, 0x0, 0x0, 0x0, 0x0) 06:50:12 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) 06:50:12 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x38}, [{}]}, 0x58) 06:50:12 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0)}}, 0x18) 06:50:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x10000, 0x101000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x40002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x2}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x20000, 0xe, 0x0, 0x43d, 0x0, 0x0, 0x7ff, 0x6e4dbd44, 0xff, 0x40000, 0x0, 0x2, 0x6, 0x3, 0xc2, 0xffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xf}, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x9) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xd99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000004c0)}, {&(0x7f0000000500)=""/45, 0x2d}, {&(0x7f0000000540)=""/243, 0xf3}, {&(0x7f0000000640)=""/252, 0xfc}, {&(0x7f0000000740)=""/217, 0xd9}, {&(0x7f0000000840)=""/107, 0x6b}, {&(0x7f00000008c0)=""/31, 0x1f}, {&(0x7f0000000900)=""/221, 0xdd}, {&(0x7f0000000a00)=""/245, 0xf5}], 0x9, &(0x7f0000000bc0)=""/101, 0x65}, 0x63) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x14, 0x6, &(0x7f0000000c80)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x54b8, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x9f, 0xb, 0x0, 0x6, 0x50, 0xfffffffffffffff5}, @ldst={0x0, 0x3, 0x2, 0x3, 0xb, 0x138, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000}], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x8c, &(0x7f0000000d00)=""/140, 0x41000, 0x0, [], 0x0, 0x5}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000280)='syz1\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x280100, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac000000000000000000000000", 0x2e}], 0x1}, 0x0) openat$cgroup_type(r2, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) 06:50:12 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x4, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2170.783596][T31138] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2170.783596][T31138] program syz-executor.0 not setting count and/or reply_len properly 06:50:12 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0)}}, 0x18) 06:50:12 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) [ 2170.874223][T31138] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2170.874223][T31138] program syz-executor.0 not setting count and/or reply_len properly 06:50:12 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) 06:50:12 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x5, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x10000, 0x101000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x40002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x2}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x20000, 0xe, 0x0, 0x43d, 0x0, 0x0, 0x7ff, 0x6e4dbd44, 0xff, 0x40000, 0x0, 0x2, 0x6, 0x3, 0xc2, 0xffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xf}, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x9) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xd99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000004c0)}, {&(0x7f0000000500)=""/45, 0x2d}, {&(0x7f0000000540)=""/243, 0xf3}, {&(0x7f0000000640)=""/252, 0xfc}, {&(0x7f0000000740)=""/217, 0xd9}, {&(0x7f0000000840)=""/107, 0x6b}, {&(0x7f00000008c0)=""/31, 0x1f}, {&(0x7f0000000900)=""/221, 0xdd}, {&(0x7f0000000a00)=""/245, 0xf5}], 0x9, &(0x7f0000000bc0)=""/101, 0x65}, 0x63) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x14, 0x6, &(0x7f0000000c80)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x54b8, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x9f, 0xb, 0x0, 0x6, 0x50, 0xfffffffffffffff5}, @ldst={0x0, 0x3, 0x2, 0x3, 0xb, 0x138, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000}], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x8c, &(0x7f0000000d00)=""/140, 0x41000, 0x0, [], 0x0, 0x5}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000280)='syz1\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x280100, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac000000000000000000000000", 0x2e}], 0x1}, 0x0) openat$cgroup_type(r2, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) [ 2170.993272][T31169] XFS (loop2): Invalid superblock magic number [ 2171.144370][T31266] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 06:50:13 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xc001, 0x0, 0x0, 0x0, 0x0) 06:50:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x38}, [{}]}, 0x58) 06:50:13 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) 06:50:13 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) 06:50:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x6, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x38}, [{}]}, 0x58) 06:50:13 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) 06:50:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x7, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x38}, [{}]}, 0x58) 06:50:13 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x2) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x6, @remote, 0xad0}, r1}}, 0x30) ioctl$RTC_UIE_ON(r2, 0x7003) 06:50:13 executing program 4: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x4a, 0x0, 0x0, 0x0, 0x0) 06:50:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x8, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2171.930628][T31386] XFS (loop2): Invalid superblock magic number [ 2172.094878][T31406] XFS (loop4): Invalid superblock magic number 06:50:14 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xc400, 0x0, 0x0, 0x0, 0x0) 06:50:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x38}, [{}]}, 0x58) 06:50:14 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) 06:50:14 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x2) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r1, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x6, @remote, 0xad0}, r1}}, 0x30) ioctl$RTC_UIE_ON(r2, 0x7003) 06:50:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x9, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:14 executing program 4 (fault-call:2 fault-nth:0): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xa, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:14 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) [ 2172.874572][T31434] sg_write: 4 callbacks suppressed [ 2172.874584][T31434] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2172.874584][T31434] program syz-executor.0 not setting count and/or reply_len properly [ 2172.912629][T31435] FAULT_INJECTION: forcing a failure. [ 2172.912629][T31435] name failslab, interval 1, probability 0, space 0, times 0 [ 2172.935416][T31435] CPU: 1 PID: 31435 Comm: syz-executor.4 Not tainted 5.1.0-rc2+ #38 [ 2172.943405][T31435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2172.953483][T31435] Call Trace: [ 2172.953511][T31435] dump_stack+0x172/0x1f0 [ 2172.953533][T31435] should_fail.cold+0xa/0x15 [ 2172.953550][T31435] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2172.953572][T31435] ? ___might_sleep+0x163/0x280 [ 2172.965759][T31435] __should_failslab+0x121/0x190 [ 2172.965779][T31435] should_failslab+0x9/0x14 [ 2172.965794][T31435] __kmalloc_track_caller+0x2d8/0x740 [ 2172.965813][T31435] ? ucma_set_option+0x10c/0x530 [ 2172.965832][T31435] memdup_user+0x26/0xb0 [ 2172.965857][T31435] ucma_set_option+0x10c/0x530 [ 2172.965870][T31435] ? ucma_set_ib_path.isra.0+0x540/0x540 [ 2172.965889][T31435] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2172.976551][T31435] ? _copy_from_user+0xdd/0x150 [ 2172.976572][T31435] ucma_write+0x2da/0x3c0 [ 2172.976585][T31435] ? ucma_set_ib_path.isra.0+0x540/0x540 [ 2172.976599][T31435] ? ucma_open+0x290/0x290 [ 2172.976626][T31435] ? apparmor_file_permission+0x25/0x30 [ 2172.976639][T31435] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2172.976659][T31435] ? security_file_permission+0x94/0x380 [ 2172.986091][T31435] __vfs_write+0x8d/0x110 [ 2172.986106][T31435] ? ucma_open+0x290/0x290 [ 2172.986124][T31435] vfs_write+0x20c/0x580 [ 2172.986145][T31435] ksys_write+0xea/0x1f0 [ 2172.986163][T31435] ? __ia32_sys_read+0xb0/0xb0 [ 2172.986179][T31435] ? do_syscall_64+0x26/0x610 [ 2172.986199][T31435] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2173.086443][T31435] ? do_syscall_64+0x26/0x610 [ 2173.091167][T31435] __x64_sys_write+0x73/0xb0 [ 2173.095827][T31435] do_syscall_64+0x103/0x610 [ 2173.100417][T31435] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2173.106306][T31435] RIP: 0033:0x458209 [ 2173.110213][T31435] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2173.129817][T31435] RSP: 002b:00007f509ab01c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2173.138257][T31435] RAX: ffffffffffffffda RBX: 00007f509ab01c90 RCX: 0000000000458209 [ 2173.146235][T31435] RDX: 0000000000000020 RSI: 0000000020000040 RDI: 0000000000000003 [ 2173.154212][T31435] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2173.162182][T31435] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f509ab026d4 06:50:15 executing program 3: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xc001, 0x0, 0x0, 0x0, 0x0) [ 2173.170174][T31435] R13: 00000000004cdd78 R14: 00000000004dd018 R15: 0000000000000004 06:50:15 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) 06:50:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x38}, [{}]}, 0x58) 06:50:15 executing program 4 (fault-call:2 fault-nth:1): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) [ 2173.283749][T31459] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2173.283749][T31459] program syz-executor.0 not setting count and/or reply_len properly [ 2173.333262][T31442] XFS (loop2): Invalid superblock magic number [ 2173.362182][T31446] XFS (loop3): Invalid superblock magic number 06:50:15 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xce03, 0x0, 0x0, 0x0, 0x0) 06:50:15 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xe, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:15 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r0}}, 0x20) 06:50:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x38}, [{}]}, 0x58) 06:50:15 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:15 executing program 3 (fault-call:2 fault-nth:0): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x10, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2174.184454][T31582] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2174.184454][T31582] program syz-executor.0 not setting count and/or reply_len properly 06:50:16 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:16 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0x16, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:16 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r0}}, 0x20) 06:50:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x14, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x38}, [{}]}, 0x58) [ 2174.389980][T31605] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2174.389980][T31605] program syz-executor.0 not setting count and/or reply_len properly [ 2174.474532][T31593] XFS (loop2): Invalid superblock magic number 06:50:17 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xd003, 0x0, 0x0, 0x0, 0x0) 06:50:17 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x16, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:17 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r0}}, 0x20) 06:50:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x38}, [{}]}, 0x58) 06:50:17 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x23, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:17 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x20000060, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:17 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x48, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:17 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) [ 2175.346479][T31726] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2175.346479][T31726] program syz-executor.0 not setting count and/or reply_len properly 06:50:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x38}, [{}]}, 0x58) 06:50:17 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x4c, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:17 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x20000358, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2175.479144][T31778] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2175.479144][T31778] program syz-executor.0 not setting count and/or reply_len properly 06:50:17 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x60, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2175.578810][T31756] XFS (loop2): Invalid superblock magic number [ 2175.999136][T31756] XFS (loop2): Invalid superblock magic number 06:50:18 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xda00, 0x0, 0x0, 0x0, 0x0) 06:50:18 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) 06:50:18 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa02, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:18 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x68, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:18 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa02, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x38}, [{}]}, 0x58) 06:50:18 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) [ 2176.464469][T31879] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2176.464469][T31879] program syz-executor.0 not setting count and/or reply_len properly 06:50:18 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x6c, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:18 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x223}}, 0x18) 06:50:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x38}, [{}]}, 0x58) 06:50:18 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) 06:50:18 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa03, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) [ 2176.645207][T31993] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2176.645207][T31993] program syz-executor.0 not setting count and/or reply_len properly [ 2176.683792][T31952] XFS (loop2): Invalid superblock magic number 06:50:19 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xe403, 0x0, 0x0, 0x0, 0x0) 06:50:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x38}, [{}]}, 0x58) 06:50:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x74, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:19 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x300}}, 0x18) 06:50:19 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) 06:50:19 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x2, r1, 0x0, 0x0, 0x1}}, 0x20) [ 2177.523901][T32124] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2177.523901][T32124] program syz-executor.0 not setting count and/or reply_len properly 06:50:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x7a, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:19 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) 06:50:19 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x7) 06:50:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x38}, [{}]}, 0x58) 06:50:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xb4, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:19 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x3, r1, 0x0, 0x0, 0x1}}, 0x20) [ 2177.778064][T32252] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2177.778064][T32252] program syz-executor.0 not setting count and/or reply_len properly [ 2177.796151][T32193] XFS (loop2): Invalid superblock magic number 06:50:20 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xe803, 0x0, 0x0, 0x0, 0x0) 06:50:20 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) 06:50:20 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x20000358) 06:50:20 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x300, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x38}, [{}]}, 0x58) 06:50:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x300, r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:20 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x428, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2178.587534][T32375] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2178.587534][T32375] program syz-executor.0 not setting count and/or reply_len properly 06:50:20 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) 06:50:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x38}, [{}]}, 0x58) 06:50:20 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x113}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x6, 0x2, "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", 0x37, 0x40, 0x100, 0xfffffffffffffc01, 0x8, 0x7fffffff, 0x5}, r1}}, 0x120) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x0, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r2, 0x1}}, 0x18) 06:50:20 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x429, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x3f00, r1, 0x0, 0x0, 0x1}}, 0x20) [ 2178.796841][T32425] XFS (loop2): Invalid superblock magic number [ 2178.839645][T32504] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2178.839645][T32504] program syz-executor.0 not setting count and/or reply_len properly 06:50:21 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xec00, 0x0, 0x0, 0x0, 0x0) 06:50:21 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) 06:50:21 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x42a, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:21 executing program 3: recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000200)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/152, 0x98}], 0x2, &(0x7f00000001c0)=""/49, 0x31}, 0x2000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x5) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x13, 0xfa00, {0x0, 0x0, 0x106, 0x100e}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8) sendmsg$xdp(r0, &(0x7f00000007c0)={&(0x7f0000000300)={0x2c, 0x7, r2, 0x8}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000380)="faeeff3352079fb887c3c8e4e4eccf16e75a611f9758d20d5f46b653743289fa72", 0x21}, {&(0x7f00000006c0)="c1e4e3be8788060634dbf910e40045db778957371737f3ad55f47161ef15aa2c8c8413e096f5e3e1b9f689361b6cf86a69025dc35c4dd45f23cebad65fb2e7045e867cf927576b70083d1b909887b3b5f165c589ddd3b6fa08ed60fbf16a045e7b25b320d2d0c447e76c2e5f73d5138c305713fa7bb7f7f379adfae236c99d3138dae82dd02a067a693668ae965a7597b821cf5d39dffb4ca866cdcbe0fa4c2417413cf545b0313dd9e1cd3aa748073346b4982787332d5939b1f80045ea", 0xbe}], 0x2, 0x0, 0x0, 0x4800}, 0x40001) 06:50:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x38}, [{}]}, 0x58) 06:50:21 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x1000000, r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:21 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) [ 2179.712592][T32627] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2179.712592][T32627] program syz-executor.0 not setting count and/or reply_len properly 06:50:21 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x42c, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:21 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r1, 0x38, "851562", "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"}}, 0x110) r2 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000080)) ioctl$RTC_PIE_OFF(r2, 0x7006) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)) 06:50:21 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) [ 2179.841678][T32627] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2179.841678][T32627] program syz-executor.0 not setting count and/or reply_len properly 06:50:21 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x42d, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x38}, [{}]}, 0x58) [ 2179.943252][T32663] XFS (loop2): Invalid superblock magic number [ 2180.022235][T32761] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2180.022235][T32761] program syz-executor.0 not setting count and/or reply_len properly 06:50:22 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xedc0, 0x0, 0x0, 0x0, 0x0) 06:50:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x2000000, r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x42e, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x38}, [{}]}, 0x58) 06:50:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:22 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) [ 2180.787548][ T508] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2180.787548][ T508] program syz-executor.0 not setting count and/or reply_len properly 06:50:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x42f, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x38}, [{}]}, 0x58) 06:50:22 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x9ea89785fdf15db8, 0x4) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000080)=0xfffffffffffffff9, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) [ 2180.948986][ T678] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2180.948986][ T678] program syz-executor.0 not setting count and/or reply_len properly 06:50:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x430, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:22 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) 06:50:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x38}, [{}]}, 0x58) [ 2180.993651][ T517] XFS (loop2): Invalid superblock magic number [ 2181.129904][ T747] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2181.129904][ T747] program syz-executor.0 not setting count and/or reply_len properly 06:50:23 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xf200, 0x0, 0x0, 0x0, 0x0) 06:50:23 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x3000000, r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x431, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:23 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) 06:50:23 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x2b4, 0xfa00, {&(0x7f00000003c0), r2, 0x2}}, 0x18) 06:50:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x38}, [{}]}, 0x58) [ 2181.869055][ T760] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2181.869055][ T760] program syz-executor.0 not setting count and/or reply_len properly 06:50:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x500, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x38}, [{}]}, 0x58) 06:50:23 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) 06:50:23 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x80) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xae, 0x2, [0x5, 0xb58]}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r1, @in={{0x2, 0x4e24, @rand_addr=0x800}}, 0xffffffffffffff13, 0x10001, 0x14b, 0x2, 0x40}, 0x98) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x7, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x600, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2182.027669][ T828] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2182.027669][ T828] program syz-executor.0 not setting count and/or reply_len properly 06:50:23 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) [ 2182.110836][ T775] XFS (loop2): Invalid superblock magic number [ 2182.553414][ T775] XFS (loop2): Invalid superblock magic number 06:50:24 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xf402, 0x0, 0x0, 0x0, 0x0) 06:50:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x3f000000, r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x38}, [{}]}, 0x58) 06:50:24 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x700, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:24 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) io_setup(0x6, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x100) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x2, r0, &(0x7f0000000080)="7ae4809fe96c69210384b58c95769fcdbb83f4b2f77974b92a57c92be22f085d1517649e2f881b96a2f4155c6db5ad7fcc2dc0dc2b24f36b2356f840c714d7ebd4f70e54f0c3d8062c91894968281c022a2b8e3cfc015994436a78dfe1cfa4a75ea4a08bc651d727a3c6f71a1b1b79e592478ca9f060c43636300af2fece1bcff7e4d07adc052adfa68732cca398a6b6e85f60ecfee5769e4157e5165bd35d08a2712f83273773a7cfa5790ff300d3f8292c80723dc14bb73c50bd38df09da879b2df0e5cd14ff8df1b05a4fae", 0xcd, 0x7, 0x0, 0x1, r2}, &(0x7f0000000200)) 06:50:24 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) 06:50:24 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) 06:50:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x38}, [{}]}, 0x58) 06:50:24 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x900, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:24 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:25 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) 06:50:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfffffff, 0x38}, [{}]}, 0x58) [ 2183.191727][ T925] XFS (loop2): Invalid superblock magic number 06:50:25 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xfc03, 0x0, 0x0, 0x0, 0x0) 06:50:25 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xa00, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:25 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getaddr={0x40, 0x16, 0x10, 0x70bd28, 0x25dfdbfd, {0xa, 0x3f, 0x10, 0xff, r2}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x3, 0xfffffffffffffffd, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 06:50:25 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) 06:50:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x100000000000000, r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbf, 0x38}, [{}]}, 0x58) 06:50:25 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) [ 2184.033837][ T1077] sg_write: 4 callbacks suppressed [ 2184.033862][ T1077] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2184.033862][ T1077] program syz-executor.0 not setting count and/or reply_len properly [ 2184.064680][ T1077] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2184.064680][ T1077] program syz-executor.0 not setting count and/or reply_len properly 06:50:25 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xe00, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:26 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x1008}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f0000000740), 0xffffffffffffffff, 0x1}}, 0x3f) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7fff, 0x2000) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000280)={r2, 0x1ff, 0x9}, 0x0, &(0x7f00000002c0)="ea11cadeb9cc5e53eb4aabe774544a969f4ff4936b9876ff98f3ebb5d44ca10dc4d5ec47788772efd9061d2ca2157f1c00c634b085ed41d3ed2208870b19d387f269fc08337261c27df3", &(0x7f00000005c0)="6506be8c458e752ee7514d7a31cfa85288403454337d430b79e0b66d8b77405878fe83e1b858aec4909b051b5a2653adfde7f86a96a3f1999448235f7e5c68dc15c868c604b2c66cc557d0d442f5642fb170841a8627d89a2a975bec29af3639fecf24217319ae03bf48b41e82034e0931a029f8445bd379fc54a66eb56a142030a4e39077d05abd3e885891e45b9e03991b9f891146bee8b443e7ca177c55fe8326b39a0b16b7dc2045cb0c0cb5c89a1a252a3e8fdf19871e93b74f6ae9a4fe6295f83b44a590e0319f2f67d1305d0ba1b1fce45787ac3b68253c") getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="736563757269ed5e00000000000000000000006ea9f6000002000001000023ad5dcc132cf3fc253dff11bb7f16b400000000005c0000002b724c5526c664627d89026291f5db1df70961f02ca09ab0ba52db04eea98ff56e15358d1254200b379e1ae792ccbd57ac1e4bfa84b15f937dc095cebfcf38de206e78520effdb5d00000000000000f7a68abd616809edaefee9f6b0008a990000000000166f038f5a162d0d0c892ffe5e6aa3414767f96181856d"], &(0x7f0000000100)=0x80) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={0x0}, &(0x7f00000006c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000700)={r3, 0x4}, 0x8) 06:50:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x38}, [{}]}, 0x58) 06:50:26 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) 06:50:26 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xf22, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2184.246944][ T1205] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2184.246944][ T1205] program syz-executor.0 not setting count and/or reply_len properly [ 2184.277559][ T1132] XFS (loop2): Invalid superblock magic number 06:50:26 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xff03, 0x0, 0x0, 0x0, 0x0) 06:50:26 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x38}, [{}]}, 0x58) 06:50:26 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x200000000000000, r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:26 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) 06:50:26 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1020, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x38}, [{}]}, 0x58) [ 2185.088764][ T1231] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2185.088764][ T1231] program syz-executor.0 not setting count and/or reply_len properly 06:50:26 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1400, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:27 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) 06:50:27 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x600002, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x9, 0x3}, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2185.219049][ T1277] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2185.219049][ T1277] program syz-executor.0 not setting count and/or reply_len properly 06:50:27 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1f00, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:27 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, 0x0}], 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) [ 2185.386591][ T1279] XFS (loop2): Invalid superblock magic number 06:50:28 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xff0f, 0x0, 0x0, 0x0, 0x0) 06:50:28 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x118, 0xfa00, {&(0x7f00000000c0), r1, 0x1}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x6}}, 0x20) fcntl$dupfd(r0, 0x406, r0) r2 = syz_open_dev$dmmidi(&(0x7f0000000400)='/dev/dmmidi#\x00', 0x6, 0x480040) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000380)}) 06:50:28 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x300000000000000, r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:28 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x38}, [{}]}, 0x58) 06:50:28 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="6368616e6765686174203078add1f41b249d92411e3030303030305e6368616e676570726f66696c6520"], 0x1) 06:50:28 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2010, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2186.252420][ T1482] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2186.252420][ T1482] program syz-executor.0 not setting count and/or reply_len properly 06:50:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x38}, [{}]}, 0x58) 06:50:28 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x220f, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:28 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x689, @mcast2, 0x80000001}, r1}}, 0x30) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x2b, 0x200000) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000140)={@local, @rand_addr=0x8}, 0x8) [ 2186.432498][ T1773] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2186.432498][ T1773] program syz-executor.0 not setting count and/or reply_len properly 06:50:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = dup2(r1, r0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 06:50:28 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2300, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2186.533474][ T1698] XFS (loop2): Invalid superblock magic number 06:50:29 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x20000, 0x0, 0x0, 0x0, 0x0) 06:50:29 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x3f00000000000000, r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x38}, [{}]}, 0x58) 06:50:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x10) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) io_setup(0xffffffff, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x6c060000) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x2, r0, &(0x7f0000000080)="a34cd1c67aa96ddd63f0bcfa963de3c804daa4739d7aaaf22095cc3d5d6cefb3ca37f8103fbf042bae059343900a8f5692", 0x31, 0x101, 0x0, 0x3}, &(0x7f0000000100)) 06:50:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x25f1, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:29 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="6368616e6765686174203078add1f41b249d92411e3030303030305e6368616e676570726f66696c6520"], 0x1) 06:50:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x263e, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2187.384901][ T1950] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2187.384901][ T1950] program syz-executor.0 not setting count and/or reply_len properly 06:50:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r0) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 06:50:29 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x2, 0x0, 0x1}}, 0x20) 06:50:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x38}, [{}]}, 0x58) 06:50:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2678, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2187.582410][ T1944] IPVS: ftp: loaded support on port[0] = 21 [ 2187.582580][ T1953] XFS (loop2): Invalid superblock magic number [ 2187.660625][ T2159] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2187.660625][ T2159] program syz-executor.0 not setting count and/or reply_len properly 06:50:29 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x3, 0x0, 0x1}}, 0x20) 06:50:30 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) r1 = memfd_create(&(0x7f0000000040)='/dev/input\\$\xb9\x9e\xd9\xf2\x91\x85\x98{\x04\x00I\xff\x11n:?1\x13\x88,D&\x83\xfb\xd77\x10^\xc7=JvtG\xf0\xb33\x17M\xefT`\xcc\xb60\xb1\xa4\xde\xf1T\xf5\x91\x0f\xeb\xd9;\v\xdd\xea;G\xc6\\\xb0\xd5\x96\xe9ku5T\x10(\x8f\xb3\xdc\x11k\x97\xb8\x1b\xb9\xd8\x98\xd5\x95\\\x14\x91~y\x8ai\xbav\xc1\r/\xc2\xcf9B\xce-\x81\xa8\xd2\xb4+k\xba\x8f9\x1f\x1e\x12)\xe9\xd2f\xc3\xb5', 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='#!'], 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 06:50:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2679, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x113, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='children\x00') getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$binfmt_script(r1, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"], 0x1055) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x3, 0x1, &(0x7f00000001c0)=[{&(0x7f00000005c0)="e64ba4490a84bec378491d41376b8f2ae2f200aa5f738e250d2eaf405447afdf6c6c6bc5d0d89f5edc52d1f0582c2ea88223f8a48a4549b1dbdbf5b8124dc9c2e277b6ed11fc6fb32c933accc6964f6329a9e9b74fe7f6e4e9a5946dfd9110ec77865046b599283944ec5430b5abc792a886889bfbb1ca09aa8d737483a80889e95594372a5d01f2a2a9a90e84cd543551b0a90c0a8e77b4c12eaaf0af46577f9b7918a36e3198981a37034ce1dc3982266fbdf846d72eb083b8f2788590bd32f5f0ec95", 0xc4, 0x9}], 0x200000, &(0x7f0000000280)='#[\x00') getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000000200)=0x10) 06:50:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x38}, [{}]}, 0x58) 06:50:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x300, 0x0, 0x1}}, 0x20) 06:50:30 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, 0x0) 06:50:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2804, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2188.449223][ T2399] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2188.449223][ T2399] program syz-executor.0 not setting count and/or reply_len properly 06:50:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x38}, [{}]}, 0x58) 06:50:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2904, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x3f00, 0x0, 0x1}}, 0x20) 06:50:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100a}}, 0xfffffffffffffff7) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x1009}}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000180)=0x130, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) [ 2188.626677][ T2478] XFS (loop2): Invalid superblock magic number 06:50:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x38}, [{}]}, 0x58) 06:50:30 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080), 0x4) 06:50:31 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xe0000, 0x0, 0x0, 0x0, 0x0) 06:50:31 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2a04, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x38}, [{}]}, 0x58) 06:50:31 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x430002, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000080)={0xa, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) 06:50:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x1000000, 0x0, 0x1}}, 0x20) 06:50:31 executing program 5: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000580)) socket$netlink(0x10, 0x3, 0x100000) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000031c0)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800) [ 2189.356934][ T2973] sg_write: 2 callbacks suppressed [ 2189.356947][ T2973] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2189.356947][ T2973] program syz-executor.0 not setting count and/or reply_len properly 06:50:31 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2c04, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:31 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x44, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000200)={0xffffffffffffffc1, 0x6, 0x2, 0x9, 0x800, 0x8}) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2189.445322][ T2973] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2189.445322][ T2973] program syz-executor.0 not setting count and/or reply_len properly 06:50:31 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) ptrace(0x4207, r0) ptrace$cont(0x7, r0, 0x0, 0x0) 06:50:31 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2d04, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x38}, [{}]}, 0x58) [ 2189.574968][ T2986] XFS (loop2): Invalid superblock magic number 06:50:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x2000000, 0x0, 0x1}}, 0x20) [ 2189.667165][ T3244] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2189.667165][ T3244] program syz-executor.0 not setting count and/or reply_len properly 06:50:32 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x989680, 0x0, 0x0, 0x0, 0x0) 06:50:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f00000000c0)="fb43d6f1307c44e64c72a6598f0017375cd5df1997e1454dadd9664defb0462d965d8019179e438090718a1e6e5e09c4342eab5e7146f4d472009a49239afa417ec1688c9d16415f6f18787d136657de31ec62d2fb528d5683c6f5fb21d218c2164d81e00cb2d80eba7192ca26c7e9d371e1809fd7e2fd241c61dfc3e473a3bdf62ce31d", 0x84) 06:50:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2e04, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:32 executing program 5: write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000580)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000bc0)={@initdev, @local}, 0x0) accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000031c0)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800) 06:50:32 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x3000000, 0x0, 0x1}}, 0x20) 06:50:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x38}, [{}]}, 0x58) 06:50:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2f04, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2190.369084][ T3484] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2190.369084][ T3484] program syz-executor.0 not setting count and/or reply_len properly 06:50:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x200) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x101000, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000000c0)={r2}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x90}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@gettfilter={0x74, 0x2e, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, r3, {0x0, 0x8}, {0xf, 0xf}, {0xc, 0xffff}}, [{0x8, 0xb, 0x611f}, {0x8, 0xb, 0x80000}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xffff}, {0x8, 0xb, 0x10000}, {0x8}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:32 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r0, 0x8004551a, &(0x7f00000000c0)={0x0, {0x2, 0x0, @local}, {}, {0x2, 0x0, @multicast1}}) [ 2190.514987][ T3556] XFS (loop2): Invalid superblock magic number [ 2190.523653][ T3484] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2190.523653][ T3484] program syz-executor.0 not setting count and/or reply_len properly 06:50:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x4400, 0x0) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) 06:50:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3004, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x38}, [{}]}, 0x58) [ 2190.723385][ T3728] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2190.723385][ T3728] program syz-executor.0 not setting count and/or reply_len properly 06:50:33 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) 06:50:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$bt_rfcomm(0x1f, 0x0, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="66b9800000c00f326635000100000f300f01cb0f18dc0f01c90820b82c018ee0260f09bad004ecb8ee000f00d866b8010000000f01d9", 0x36}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:50:33 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x3f000000, 0x0, 0x1}}, 0x20) 06:50:33 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1ff, 0x8000) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f00000001c0)={0x5, 0x100000000, 0x3, 0x5, 0x80000000}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') io_setup(0xacb5, &(0x7f0000000200)=0x0) io_submit(r3, 0x4, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x6f2d, r0, &(0x7f0000000240)="485ecbb1bd078852de875a3e2ad031f5dce3d737ec5dfd5204c98994a5702ecac7bef484246336665930c53ead9269d6d7d421738ec34344b37856f21138369599a64dff46f8108f0faca7e235dbea", 0x4f, 0xeedb91c, 0x0, 0x0, r1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000300)="8568e48b9ee599fee2c764d419e00b8c4b4b8caeac8524", 0x17, 0x0, 0x0, 0x0, r1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x9, 0x1, r0, &(0x7f00000005c0)="b43d26e3445f8e14f661ab0371b6ce38c759b20f290d15b50519755cf23695862d13a6a02f855932604921bbb27e0a58b38dafc1d7c4056a4f879bcc", 0x3c, 0xffff, 0x0, 0x1, r1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000000640)="e14ad1cbb4383308a77db82bb0f0f64a5ce5c8523f8272d8b5092a1d5b95c6831c88bac3527a1c54425a6e59d9dc2dc9b107fec2f55f2315897e3ca718fdfe5ff9b6f33825f18e9204c59b609eb2cb7368564c95d8", 0x55, 0x0, 0x0, 0x0, r1}]) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x10, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3104, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x38}, [{}]}, 0x58) 06:50:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3e26, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2191.258899][ T3742] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2191.258899][ T3742] program syz-executor.0 not setting count and/or reply_len properly [ 2191.376037][ T3742] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2191.376037][ T3742] program syz-executor.0 not setting count and/or reply_len properly 06:50:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3f00, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x38}, [{}]}, 0x58) [ 2191.431586][ T3753] XFS (loop2): Invalid superblock magic number 06:50:33 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x33, 0x2}, 0x7) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000580)) socket$netlink(0x10, 0x3, 0x100000) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000031c0)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800) 06:50:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2191.536671][ T4061] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2191.536671][ T4061] program syz-executor.0 not setting count and/or reply_len properly 06:50:33 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x100000000000000, 0x0, 0x1}}, 0x20) 06:50:33 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0) 06:50:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x6, @mcast2, 0x6}}, 0x9, 0x5, 0x0, 0x5, 0xd6}, &(0x7f00000001c0)=0x98) mq_timedreceive(r0, &(0x7f0000000200)=""/97, 0x61, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = inotify_add_watch(r0, &(0x7f0000000280)='./file0\x00', 0x40000180) inotify_rm_watch(r0, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x4800, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:33 executing program 5: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() setxattr$security_smack_entry(0x0, 0x0, &(0x7f00000001c0)='/dev/ptmx\x00', 0xa, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) msgget(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x0, 0x0) close(r0) 06:50:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x38}, [{}]}, 0x58) 06:50:33 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x200000000000000, 0x0, 0x1}}, 0x20) 06:50:34 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x4c00, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2192.188496][ T4283] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2192.188496][ T4283] program syz-executor.0 not setting count and/or reply_len properly 06:50:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfffffff00000000, 0x38}, [{}]}, 0x58) 06:50:34 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'bond_slave_0\x00'}) r2 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00L\x00\x00\x00\x00`\x00'}) ioctl$TCXONC(r1, 0x540a, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) fcntl$dupfd(r0, 0x0, r0) 06:50:34 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x6000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:34 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, 0x0, 0x0, 0x100b}}, 0x2b) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000002c0)=0xcfc1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r5 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x100) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={0x0, r5, 0x1, 0x1}, 0x14) ptrace$peekuser(0x3, r3, 0x4) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r2, 0x6}}, 0x10) 06:50:34 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x300000000000000, 0x0, 0x1}}, 0x20) [ 2192.423127][ T4475] XFS (loop2): Invalid superblock magic number 06:50:34 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x3000000, 0x0, 0x0, 0x0, 0x0) 06:50:34 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x6800, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [{}]}, 0x58) 06:50:34 executing program 3: prctl$PR_SET_DUMPABLE(0x4, 0x3) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) shmget(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {r1, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r1, 0x9, 0x0, 0x0, 0x0, @ib={0x1b, 0x8, 0x20, {"6e1892296ead5da4b0ad2d8b1f780191"}, 0x4, 0x2, 0x5}, @in={0x2, 0x4e23, @broadcast}}}, 0x118) 06:50:34 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x3f00000000000000, 0x0, 0x1}}, 0x20) 06:50:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x6c00, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:35 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3}, [{}]}, 0x58) 06:50:35 executing program 5: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, 0x0, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="6368616e676568617420307830303030303030303030b030303030325e65746831776c616e3076626f786e657431656d315d7d73797374656d656d3173656c665b2926232f2d4076626f786e657430656d312f70726f632f7468726561642d73656c662f617474722f63757272656e74002f70726f632f7468726561642d73656c662f617474722fe7354863757272656e74002ded13fa6563e66838fa2134b46b09a666b298ded23507ad0d280d091105f98d78a88d6a3177d6ace75eef7aed167263906b5287f13a958fcebed8653d8c1591898536f0299727ee7504df2b1a4000236dc88ca31173545309245546729e30a816447d3b22cd788dc1fa"], 0x1) 06:50:35 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x300}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe00000000}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:35 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}]}, 0x58) 06:50:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x7400, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:35 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x2, 0x1}}, 0x20) [ 2193.650012][ T4842] XFS (loop2): Invalid superblock magic number 06:50:35 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0) 06:50:35 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, 0x0) 06:50:35 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:35 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x3}, [{}]}, 0x58) 06:50:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x7826, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:35 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x3, 0x1}}, 0x20) 06:50:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x4}, [{}]}, 0x58) 06:50:36 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0585609, &(0x7f0000000080)={0x0, @raw_data="2efddb2424f7b0a2a2ec3f1b0d14bbb78df3107bb3098bf8ace719c92aab0776ef3d00c07f74cc6b0ac5df84365d5030be546da186a66a83bcb2cd788d65bff8077b984d185b416a1c7e88f59a939285b31020d38d41b6885089a4ec4d332b352722a1e733b7070e63fa31324ab4402caf73584276d0e67e1f6cff59d82edd0c62a44c03f877711891da325ebedb8a272b1c4fe68a961bf8239776c7ade0e33b575190b350b086c833ce4fc581298ae61f9c604e882c8a48f792fe06f81267e006bf6c2aadc74458"}) 06:50:36 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x7926, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x300, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="25a55dd9dbbb449f9e787e75bb4f6278eede724ca414c5c45f845bbd8394d97c39b66dd305ce781ca0e82db2ee38ef69b6f755d9bea95a04f95f8289d68714c617a57c91a74bcf78780cfc6ac0fed79e0513a1e7c4f82d91f101834a9ebd10c00dc1b9a5422ab8ef5f005f1394910b1a843fd39c7bf826bd05d4771228dcb53bf5ef0b1e573f27cea743260dfc7bf53342a35cc605adc6aa87389e0a506cb0c1c718246b9fd7fd316da2656443c8adfba4c429d581f9988e56f94c72437e8198cb922d062a5de86a99430e8dcb984a6585584bb91b2b7269d65ee15a1ddd4f14e5", 0xe1}, {&(0x7f0000000180)="06fdb85c541eaeb8165ca0883ba43adaac309538a307157491d2881115fb27e6d4681354e252d83e385ce501dd93b6b1f81c9088363b33ec2fe4cefd8541fce40c99dc4243037e804a0c7c976d55af9167a1c4dc9c103646c8ad62e3701ecbec85888b6b98db688941f9eb3b3ba71738b522db4fcc795145871fabd1d4275b947c0afaafd9b10cdb0c0e10a9f5c7fca080b1424a19ceaebcb8443f38a6a3b8d42ef268bfb1e36294977058bd28e03597c56bcf74eada3016d1fe5ca3a9f9f66c525b6b081f9b15b509ff5362ebadaf2061fa92a2c094294ed8", 0xd9}], 0x2, 0x0, 0x0, 0x41}, 0x8000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x5}, [{}]}, 0x58) 06:50:36 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x2276) [ 2194.356380][ T5284] XFS (loop2): Invalid superblock magic number [ 2194.411945][ T5409] sg_write: 7 callbacks suppressed [ 2194.411958][ T5409] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2194.411958][ T5409] program syz-executor.0 not setting count and/or reply_len properly 06:50:37 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x5000000, 0x0, 0x0, 0x0, 0x0) 06:50:37 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x7a00, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) 06:50:37 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x300, 0x1}}, 0x20) 06:50:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x6}, [{}]}, 0x58) 06:50:37 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x33, 0x2}, 0x7) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000580)) socket$netlink(0x10, 0x3, 0x100000) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) read(0xffffffffffffffff, &(0x7f0000000140)=""/117, 0x1da) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000bc0)={@initdev, @local}, 0x0) [ 2195.257319][ T5426] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2195.257319][ T5426] program syz-executor.0 not setting count and/or reply_len properly 06:50:37 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xb400, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x7}, [{}]}, 0x58) 06:50:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0xd8, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffdef93aba}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100000001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x10}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) r2 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000200)={0x3, 0x6, 0xcd8, 0x2, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}]}) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f00000002c0)={0x6, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @remote}]}) 06:50:37 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x3f00, 0x1}}, 0x20) 06:50:37 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000580)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) read(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000031c0)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800) 06:50:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10002, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000080)={0x2, 0x6, 0xb8e6, 0x2, 0x7}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2195.474477][ T5646] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2195.474477][ T5646] program syz-executor.0 not setting count and/or reply_len properly [ 2195.561070][ T5612] XFS (loop2): Invalid superblock magic number 06:50:38 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x6000000, 0x0, 0x0, 0x0, 0x0) 06:50:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xedc0, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x10}, [{}]}, 0x58) 06:50:38 executing program 3: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) timer_create(0x0, &(0x7f0000000280)={0x0, 0xa, 0x4, @thr={&(0x7f00000001c0)="80988684115db2b5b89cec7df8a00ef402a232d66af3698d484a588a1f14fce803ff0af48f3c86bdaf3207e7", &(0x7f0000000200)="dd27ffbfe4b0c1d22ccc11c17a728911e05ec55f2fc60e167ef2c283c3b4281f44d3a48d6403c052db60021f1d6f36c7c8410ef0a637f67116ca261fbad9a4ad4a3b904e289ac768abfa01db21758941918e6f6d8275b551da7d7d3a1301621fdc59103bf256f91f99da9b946ec921b10a2777ad3e253a81f1cf"}}, &(0x7f00000002c0)=0x0) timer_delete(r2) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) prctl$PR_GET_SECCOMP(0x15) 06:50:38 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x0, r1}) 06:50:38 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x1000000, 0x1}}, 0x20) 06:50:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xf125, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2196.419375][ T5883] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2196.419375][ T5883] program syz-executor.0 not setting count and/or reply_len properly 06:50:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r0, &(0x7f0000000380)={'syz0', "0153e45e4e3c48939a462d365db2dbd776d6b9c145fd9d8c001b000b7f76ca0bd5de543a5008085057c73287ec4c0c234424e217690efc74efaaa45ead8b23dc85ec7f78240dc54be04e2293f7b57d77d9ac94ed55e0eb19a831dfe470e5c77f40835c2e40e098fb436f6c02cb8f9b1ea2767274a3ea0d18c90b986dd121c139abfab1dec1b5a95b2ab9fd118aa093b963fb7da6edd94dce2217c321b3cd7270984a40efd107b0154d6bb43f46ca0551c56b64a932765e8f1d7e168a2dd07496a9810b5ac0a49e3dd8c16afcf60e5cca8b189b064d973c9b36"}, 0xdd) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x48}, [{}]}, 0x58) 06:50:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xff0f, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2196.637398][ T6187] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2196.637398][ T6187] program syz-executor.0 not setting count and/or reply_len properly 06:50:38 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x2000000, 0x1}}, 0x20) 06:50:38 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)) [ 2196.740192][ T6122] XFS (loop2): Invalid superblock magic number 06:50:39 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x7000000, 0x0, 0x0, 0x0, 0x0) 06:50:39 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x20040, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0xfffffffffffffecf, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x3}}, 0x18) fremovexattr(r0, &(0x7f0000000080)=@random={'security.', '/dev/md0\x00'}) 06:50:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x4c}, [{}]}, 0x58) 06:50:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="66b9800000c00f326635000100000f300f01cb0f18dc0f01c90820b82c018ee0260f09bad004ecb8ee000f00d866b8010000000f01d9", 0x36}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:50:39 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:39 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x3000000, 0x1}}, 0x20) 06:50:39 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xe0000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2197.578396][ T6328] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2197.578396][ T6328] program syz-executor.0 not setting count and/or reply_len properly [ 2197.631780][ T6328] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2197.631780][ T6328] program syz-executor.0 not setting count and/or reply_len properly 06:50:39 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x400000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:39 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7, 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0x1ff, 0x4c2}, {0xb5c, 0x64a}, 0x80000000, 0x6, 0x80000000}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400200, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000080)={0x101ff, 0x0, &(0x7f0000ff9000/0x4000)=nil}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x8, 0x3, 0x0, [{0x80, 0x3ff, 0x3, 0x101, 0xffffffff80000000, 0x9c5, 0x2}, {0xfffffffffffffffa, 0x38, 0x9, 0x4, 0x4, 0x9, 0x7f}, {0x3, 0x1a, 0xfffffffffffffff7, 0x0, 0x6f, 0x0, 0x3}]}) 06:50:39 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x60}, [{}]}, 0x58) [ 2197.850513][ T6368] XFS (loop2): Invalid superblock magic number [ 2197.887987][ T6456] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; 06:50:39 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x3f000000, 0x1}}, 0x20) [ 2197.887987][ T6456] program syz-executor.0 not setting count and/or reply_len properly [ 2198.273592][ T6368] XFS (loop2): Invalid superblock magic number 06:50:40 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x10}) 06:50:40 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x68}, [{}]}, 0x58) 06:50:40 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0) 06:50:40 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x100000000000000, 0x1}}, 0x20) 06:50:40 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x33, 0x2}, 0x7) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000580)) socket$netlink(0x10, 0x3, 0x100000) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) read(0xffffffffffffffff, &(0x7f0000000140)=""/117, 0x1da) accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000031c0)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800) 06:50:40 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2198.891994][ T6693] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2198.891994][ T6693] program syz-executor.0 not setting count and/or reply_len properly 06:50:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x58) 06:50:40 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000008b40)='cgroup.events\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000008b80)={0x0, 0x30000}, &(0x7f0000008bc0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000008c00)={r2, 0x136}, &(0x7f0000008c40)=0x8) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000200)={0x9, 0x5, r3, 0x0, r4, 0x0, 0x3ff, 0xce}) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x101, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000240)=0x3) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000280), 0x4) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r5}}, 0xc) [ 2199.055320][ T6816] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2199.055320][ T6816] program syz-executor.0 not setting count and/or reply_len properly 06:50:40 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x74}, [{}]}, 0x58) 06:50:40 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace(0x4207, r0) ptrace$cont(0x7, r0, 0x0, 0x0) 06:50:41 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x200000000000000, 0x1}}, 0x20) [ 2199.176503][ T6796] XFS (loop2): Invalid superblock magic number 06:50:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x5000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x7a}, [{}]}, 0x58) 06:50:41 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x9000000, 0x0, 0x0, 0x0, 0x0) 06:50:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x6000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000080)=0x8000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x300}, [{}]}, 0x58) 06:50:41 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x4, @raw_data="2efddb2424f7b0a2a2ec3f1b0d14bbb78df3107bb3098bf8ace719c92aab0776ef3d00c07f74cc6b0ac5df84365d5030be546da186a66a83bcb2cd788d65bff8077b984d185b416a1c7e88f59a939285b31020d38d41b6885089a4ec4d332b352722a1e733b7070e63fa31324ab4402caf73584276d0e67e1f6cff59d82edd0c62a44c03f877711891da325ebedb8a272b1c4fe68a961bf8239776c7ade0e33b575190b350b086c833ce4fc581298ae61f9c604e882c8a48f792fe06f81267e006bf6c2aadc74458"}) 06:50:41 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x300000000000000, 0x1}}, 0x20) 06:50:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x7000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:41 executing program 5: openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x2}}, 0x20) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000380)={0x1, 0x0, {0xfffffffffffffffc, 0x1, 0x81, 0x6}}) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000600)='./file0\x00', 0x4000, 0x0) write(r1, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000200)=0xff, 0x4) sendfile(r1, r2, 0x0, 0xc7000000) [ 2200.027180][ T7251] sg_write: 3 callbacks suppressed [ 2200.027194][ T7251] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2200.027194][ T7251] program syz-executor.0 not setting count and/or reply_len properly 06:50:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x8000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2200.091364][ T7251] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2200.091364][ T7251] program syz-executor.0 not setting count and/or reply_len properly 06:50:42 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x3f00000000000000, 0x1}}, 0x20) [ 2200.190619][ T26] audit: type=1800 audit(1553669442.027:77): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="loop5" ino=3 res=0 06:50:42 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x500}, [{}]}, 0x58) 06:50:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) r1 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x73, 0x103) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x2, 0x70, 0x433782f0, 0x3, 0x9c, 0x1, 0x0, 0x7, 0x0, 0x9, 0x8, 0x401, 0x401, 0xfffffffffffff613, 0x40000000800, 0x2, 0x84, 0x2, 0x6, 0x80000000, 0x9, 0x7ff, 0x2, 0xfffffffffffffff8, 0x1000, 0x1, 0xfffffffffffffffe, 0x9, 0x3, 0x80, 0x0, 0x0, 0x6317, 0x8, 0x866, 0x200, 0xfff, 0x38d, 0x0, 0x3f, 0x2, @perf_config_ext={0x9a8}, 0x2, 0x200, 0xc880000000000000, 0x6, 0x80000001, 0x8, 0xfff}) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000001c0)={0x5e, 0x3f, 0x6, 0x0, 0x0, [{r0, 0x0, 0x5665195e}, {r2, 0x0, 0x200}, {r3}, {r1, 0x0, 0xffffffff00000001}, {r0, 0x0, 0x3}, {r2, 0x0, 0xa28}]}) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x80000000, 0x3) [ 2200.330487][ T26] audit: type=1804 audit(1553669442.047:78): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir403872222/syzkaller.Tk0dgc/4723/file0/file0" dev="loop5" ino=3 res=1 [ 2200.400799][ T7328] XFS (loop2): Invalid superblock magic number [ 2200.423573][ T7431] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2200.423573][ T7431] program syz-executor.0 not setting count and/or reply_len properly [ 2200.459742][ T26] audit: type=1800 audit(1553669442.047:79): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="loop5" ino=3 res=0 06:50:43 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xa000000, 0x0, 0x0, 0x0, 0x0) 06:50:43 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x600}, [{}]}, 0x58) 06:50:43 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x9000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:43 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x223}}, 0x20) 06:50:43 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000000)={0x0, "c3141d0fba8bfefc25c1e7cbeabea36a5a0ce021c145fa60b8b6dec5d68986c668ba98fe0bafbdb3ff6d59d5cfa4a291353227522cf6f8453fd71215f005cbee7af55d0e93f2d69f9bb892073d0b8d48ed270ed7edee5da9629cf948bb85cb1410796e5f96c8b48f20352667bfb5f35f7688b10e5fea4e9d8b0fbdfb0788d8ac"}) 06:50:43 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000340)='./control\x00', 0x0) r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) r2 = open(&(0x7f0000000080)='./control/file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000700)=""/80, 0x20d) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unlinkat(r2, &(0x7f0000000400)='./file0\x00', 0x0) close(r1) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:43 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xa000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2201.293544][ T7747] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2201.293544][ T7747] program syz-executor.0 not setting count and/or reply_len properly 06:50:43 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80024322, 0x0) [ 2201.338906][ T26] audit: type=1804 audit(1553669443.167:80): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir811114647/syzkaller.cVzO3q/5412/file0/control/file0" dev="ramfs" ino=318525 res=1 06:50:43 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x700}, [{}]}, 0x58) 06:50:43 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x10000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:43 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x33, 0x2}, 0x7) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000580)) socket$netlink(0x10, 0x3, 0x100000) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) read(0xffffffffffffffff, 0x0, 0x0) [ 2201.482920][ T7950] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2201.482920][ T7950] program syz-executor.0 not setting count and/or reply_len properly 06:50:43 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x300}}, 0x20) [ 2201.559122][ T7871] XFS (loop2): Invalid superblock magic number 06:50:44 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xd000000, 0x0, 0x0, 0x0, 0x0) 06:50:44 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000680)='/dev/full\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000008c0), &(0x7f0000000900)=0xc) gettid() fcntl$getownex(r0, 0x10, &(0x7f00000009c0)) fcntl$getownex(r0, 0x10, &(0x7f00000006c0)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000980)={r1, 0xffffffffffffff9c, 0x0, 0xc, &(0x7f00000002c0)='[vmnet0#&:[\x00', 0xffffffffffffffff}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000780)={{0xa, 0x3, 0x2, 0x4, 'syz1\x00', 0x6}, 0x3, 0x0, 0xfffffffffffff62a, r2, 0x4, 0x2, 'syz1\x00', &(0x7f0000000740)=['/dev/mixer\x00', '/dev/mixer\x00', '/dev/mixer\x00', '[vmnet0#&:[\x00'], 0x2d, [], [0x3, 0x9c, 0x6, 0x3]}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/mixer\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000600)={{0x8, 0x7}, {0x101, 0x3}, 0x8000, 0x0, 0x5}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xc000, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180)={r5, 0x7}, &(0x7f00000001c0)=0x8) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) flock(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r7}}, 0x18) finit_module(r6, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x1) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x80000001}}, 0xfffffffffffffd86) 06:50:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x2000}, [{}]}, 0x58) 06:50:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x14000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x400000}}, 0x20) 06:50:44 executing program 5: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x4000) 06:50:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1f000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2202.371661][ T8195] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2202.371661][ T8195] program syz-executor.0 not setting count and/or reply_len properly [ 2202.403888][ T8195] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2202.403888][ T8195] program syz-executor.0 not setting count and/or reply_len properly 06:50:44 executing program 5: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x4000) 06:50:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f00000000c0)={0x0, 0x8, 0x3, [], &(0x7f0000000080)=0x4}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fsetxattr$security_ima(r1, &(0x7f00000002c0)='security.ima\x00', &(0x7f00000005c0)=@v2={0x5, 0x0, 0x10, 0x7, 0xec, "ebdcd9c35d4a4ad19d48ca2817e11bb7f2a4d6b03fc21826d7c5e3da0905ae00906bba8c4a06b62137bb9f8989f6ec75a913134c9fe7062b69d0bd5e2ea7e13897e48edeabb0c957103dd82688f8fb9e297b9dd15be308657604517e4aaa6bcb5240caa6317391c332974f934559c9ad4abb3a499d6c50ab91f4fb087db404a414196764657a6ca06b00465fe044f43568b5b5d5f64f5c8b53cd918d1a2f8b427b3d625198a4db77c979313413346bab43059a5d9a39845dee5c3e937b0ee74dbce05b0eb5e2f0961892b1592bd28288d25d2b6424e11eb8b949634a00a6de37dec66152e896148a5c5e7d28"}, 0xf6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x1007}}, 0xffffffffffffff85) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0xff, 0x1, "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", 0x15, 0x80000001, 0x8, 0x3f, 0x1, 0x9, 0x0, 0x1}, r2}}, 0x120) 06:50:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x4000}, [{}]}, 0x58) 06:50:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x20000001}}, 0x20) 06:50:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2202.580963][ T8271] XFS (loop2): Invalid superblock magic number [ 2202.614780][ T8323] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2202.614780][ T8323] program syz-executor.0 not setting count and/or reply_len properly 06:50:45 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x18020000, 0x0, 0x0, 0x0, 0x0) 06:50:45 executing program 5: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x4000) 06:50:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x802, 0x1009}}, 0xfffffffffffffd55) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:45 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x20100000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x4800}, [{}]}, 0x58) 06:50:45 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0xffffff1f}}, 0x20) 06:50:45 executing program 5: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x4000) 06:50:45 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x220f0000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2203.357449][ T8447] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2203.357449][ T8447] program syz-executor.0 not setting count and/or reply_len properly 06:50:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x2, 0x0) getdents64(r1, &(0x7f00000000c0)=""/100, 0x64) ioctl$VT_DISALLOCATE(r1, 0x5608) write$P9_RLCREATE(r2, &(0x7f0000000140)={0x18, 0xf, 0x2, {{0x0, 0x1, 0x5}}}, 0x18) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000180)=0x6, 0x4) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x4c00}, [{}]}, 0x58) 06:50:45 executing program 5: syz_open_dev$usb(0x0, 0x201, 0x4000) 06:50:45 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x7) [ 2203.522870][ T8451] XFS (loop2): Invalid superblock magic number [ 2203.559591][ T8568] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2203.559591][ T8568] program syz-executor.0 not setting count and/or reply_len properly 06:50:46 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x1a030000, 0x0, 0x0, 0x0, 0x0) 06:50:46 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x23000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x6000}, [{}]}, 0x58) 06:50:46 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x900, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x900}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8001}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000800) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000001c0)) 06:50:46 executing program 5: syz_open_dev$usb(0x0, 0x201, 0x4000) 06:50:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20000060) 06:50:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x6800}, [{}]}, 0x58) 06:50:46 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x28040000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:46 executing program 5: syz_open_dev$usb(0x0, 0x201, 0x4000) 06:50:46 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8001, 0x8c00) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000080)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x6c00}, [{}]}, 0x58) 06:50:46 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x29040000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2204.573484][ T8722] XFS (loop2): Invalid superblock magic number 06:50:47 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0) 06:50:47 executing program 5: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x4000) 06:50:47 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 06:50:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000080)='veth1_to_bridge\x00') write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:47 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2a040000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x7400}, [{}]}, 0x58) 06:50:47 executing program 5: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x4000) 06:50:47 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2c040000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2205.403662][ T8845] sg_write: 4 callbacks suppressed [ 2205.403675][ T8845] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2205.403675][ T8845] program syz-executor.0 not setting count and/or reply_len properly 06:50:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x7a00}, [{}]}, 0x58) 06:50:47 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2d040000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:47 executing program 5: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x4000) 06:50:47 executing program 3: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2205.624324][ T8887] XFS (loop2): Invalid superblock magic number [ 2205.631674][ T9073] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2205.631674][ T9073] program syz-executor.0 not setting count and/or reply_len properly [ 2206.095648][ T8887] XFS (loop2): Invalid superblock magic number 06:50:48 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x20100000, 0x0, 0x0, 0x0, 0x0) 06:50:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x101000, 0xc) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xfffffffffff7fe00, 0x40) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000100)=r2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000140)={0x8, 0x4, [0x6]}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r3, 0x0, 0x0, 0x1}}, 0x20) 06:50:48 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2e040000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:48 executing program 5: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) 06:50:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x1000000}, [{}]}, 0x58) 06:50:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:48 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2f040000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:48 executing program 5: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) [ 2206.688222][ T9097] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2206.688222][ T9097] program syz-executor.0 not setting count and/or reply_len properly 06:50:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x2000000}, [{}]}, 0x58) 06:50:48 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x30040000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4a, 0x200) write$rfkill(r1, &(0x7f0000000080)={0x2, 0x2, 0x0, 0x1, 0x1}, 0x8) [ 2206.857305][ T9248] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2206.857305][ T9248] program syz-executor.0 not setting count and/or reply_len properly 06:50:48 executing program 5: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) [ 2206.946268][ T9148] XFS (loop2): Invalid superblock magic number 06:50:49 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x23000000, 0x0, 0x0, 0x0, 0x0) 06:50:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x3000000}, [{}]}, 0x58) 06:50:49 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0xa0000) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x9, 0x15, 0xfffffffffffffe01, 0x4, "7a2b871b5c777659ee87effb00985e42336510f4b7c680d1acd587fd7922694d"}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000100)={0x0, 0x8, [0x5, 0x4]}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r2, 0x0, 0x0, 0x1}}, 0x20) 06:50:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x31040000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:49 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0), 0x8) 06:50:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) fcntl$dupfd(r0, 0x0, r0) 06:50:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3e260000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2207.822640][ T9445] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2207.822640][ T9445] program syz-executor.0 not setting count and/or reply_len properly 06:50:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xb29, 0x80) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xa7c, 0x30}, &(0x7f0000000180)=0xc) syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x101, 0x76f41a91a41226ae) pipe(&(0x7f0000000000)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r4, &(0x7f0000000080), 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x800, 0x8, 0x6, 0x6, 0xfff}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000140)=r6) [ 2207.881401][ T9445] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2207.881401][ T9445] program syz-executor.0 not setting count and/or reply_len properly 06:50:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x4000000}, [{}]}, 0x58) 06:50:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3f000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2207.978978][ T9453] XFS (loop2): Invalid superblock magic number 06:50:49 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) prctl$PR_SET_FPEMU(0xa, 0x0) 06:50:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x40000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2208.049506][ T9573] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2208.049506][ T9573] program syz-executor.0 not setting count and/or reply_len properly 06:50:50 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x34010000, 0x0, 0x0, 0x0, 0x0) 06:50:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x5000000}, [{}]}, 0x58) 06:50:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x48000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) [ 2208.636798][ T9789] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2208.636798][ T9789] program syz-executor.0 not setting count and/or reply_len properly 06:50:50 executing program 5: openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000700)={0x9, 0x108, 0xfa00, {r1, 0x69, "28b11d", "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"}}, 0x110) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x4000, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000200)=0xff, 0x4) sendfile(r2, r3, 0x0, 0xc7000000) 06:50:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x200400, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0xd, &(0x7f0000000180)=""/241, &(0x7f0000000280)=0xf1) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x400) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x4, 0x7}]}) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x4c000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x1, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r2, 0x0, 0x0, 0x1}}, 0x20) 06:50:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x6000000}, [{}]}, 0x58) 06:50:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x60000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xe, 0x40) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000000c0)=0xd001) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2208.819773][ T9928] XFS (loop2): Invalid superblock magic number 06:50:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x68000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2208.891011][T10058] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2208.891011][T10058] program syz-executor.0 not setting count and/or reply_len properly [ 2208.974950][T10058] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2208.974950][T10058] program syz-executor.0 not setting count and/or reply_len properly 06:50:51 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x3f000000, 0x0, 0x0, 0x0, 0x0) 06:50:51 executing program 5: openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000700)={0x9, 0x108, 0xfa00, {r1, 0x69, "28b11d", "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"}}, 0x110) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x4000, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000200)=0xff, 0x4) sendfile(r2, r3, 0x0, 0xc7000000) 06:50:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x6c000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2040, 0x0) ioctl$VT_RELDISP(r2, 0x5605) accept4$unix(r2, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x800) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) 06:50:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x7000000}, [{}]}, 0x58) 06:50:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x74000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x10000000}, [{}]}, 0x58) 06:50:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x78260000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x20000000}, [{}]}, 0x58) 06:50:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x117, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x2}}, 0x18) [ 2209.782453][T10433] XFS (loop2): Invalid superblock magic number 06:50:52 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x79260000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:52 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) read(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000031c0)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800) 06:50:52 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0) 06:50:52 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000140)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x381, 0xfa00, @id_tos={&(0x7f0000000000), r2, 0x0, 0x0, 0x1}}, 0x20) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x410000, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f00000000c0)=0x6) 06:50:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, 0x1}}, 0x18) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="000233a82d830392183faaeeb8f314c5063a0bde16edc310b291eb1f95fd90103c0d", @ANYRES16=r2, @ANYBLOB="000328bd7000ffdbd6250d0000003c0001000800050002000000080006006f76660008000800de0c0000a3fd3c31b347bd10bd2b353a049a8d080d02000c000000080004004e21000008"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 06:50:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x40000000}, [{}]}, 0x58) 06:50:52 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x7a000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2210.659031][T10699] sg_write: 4 callbacks suppressed [ 2210.659043][T10699] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2210.659043][T10699] program syz-executor.0 not setting count and/or reply_len properly 06:50:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x48000000}, [{}]}, 0x58) [ 2210.781716][T10891] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2210.781716][T10891] program syz-executor.0 not setting count and/or reply_len properly 06:50:52 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x8cffffff, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:52 executing program 4: io_setup(0x5, &(0x7f0000000080)=0x0) io_pgetevents(r0, 0x3, 0x9, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x3}, 0x8}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x81, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000640)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r3, 0x20, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x8051) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40010) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000480)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000740)) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0xffffff0f, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r5, 0x0, 0x0, 0x1}}, 0x20) r6 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCADDDLCI(r6, 0x8980, &(0x7f0000000300)={'tunl0\x00', 0x5}) 06:50:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x6, @loopback, 0x80000001}, {0xa, 0x4e23, 0x40, @empty, 0x2}, r1, 0x92a}}, 0x48) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {r1, 0x11}}, 0x10) r2 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x6, 0x181080) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000001c0)=0xb3, 0x4) pread64(r2, &(0x7f0000000200)=""/94, 0x5e, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0xfcd7) accept$inet6(r2, 0x0, &(0x7f00000002c0)) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000280)={0xd, 0x7}) 06:50:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x4c000000}, [{}]}, 0x58) [ 2210.851165][T10739] XFS (loop2): Invalid superblock magic number [ 2210.972378][T11027] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2210.972378][T11027] program syz-executor.0 not setting count and/or reply_len properly 06:50:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0xffffffa0, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000080)={0x1, 0x8, 0xff, 0x3}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000140)="20992fa98ed3e25eef61ca2c7b368936ddefb9b3d43482a572785125d1bec136696c89904770938238932eeb3b1293d2143f2d041b682d1dcbbb32eeba132681eb02189998cf14f828fd3bc5d1e4cdf6b7d581001b8c015c82e0e60c7697aa0c81f70f1c6dfbbda374b1fdae8be7066a2b2f789f372d5b7433a56a1677e6f9bc97f9bea291491dd40c24819bceeda135462cc17537802cad6148623e2554b7c58f288d20b3fa86cc37b285d4eba6734d55d19792407c7c8588927609d7eaa53760e230a45133c1a1d219522f27a9264a046dd1a72a14c45855accec9fdf84c9bb04bebe2dc6b7ba4cca96a027f61237a9d4ef6cb9af04d71", &(0x7f0000000240)=""/133}, 0x18) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @default, @bpq0='bpq0\x00', 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}) 06:50:53 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040)={0x8}, 0x4) 06:50:53 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x40010000, 0x0, 0x0, 0x0, 0x0) 06:50:53 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xb4000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x60000000}, [{}]}, 0x58) 06:50:53 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) socket$inet(0x2, 0xb, 0x1f) 06:50:53 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x227e) 06:50:53 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) socket$netlink(0x10, 0x3, 0x100000) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000031c0)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800) [ 2211.732164][T11155] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2211.732164][T11155] program syz-executor.0 not setting count and/or reply_len properly 06:50:53 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket(0x4, 0x1, 0x8) accept4$nfc_llcp(r1, &(0x7f00000005c0), &(0x7f0000000380)=0x60, 0x80800) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000000)=0x9224, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x800, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0xffffffffffffffff, 0x8, {{0x2, 0x0, 0x1ff, 0x401, 0x6, 0x2, {0x5, 0x5, 0x0, 0x7870, 0x3, 0xfffffffffffffffb, 0x1, 0x3, 0x1, 0x3, 0x9, r3, r4, 0x6, 0xffffffffffffffff}}, {0x0, 0x2}}}, 0xa0) 06:50:53 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xc0ed0000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x68000000}, [{}]}, 0x58) 06:50:53 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) r2 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x800) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000100)={{0x2c, @remote, 0x4e20, 0x3, 'fo\x00', 0x0, 0x3, 0x1}, {@rand_addr=0x1, 0x4e22, 0x2, 0x4, 0x4, 0x1000}}, 0x44) 06:50:53 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xf1250000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2211.935090][T11381] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2211.935090][T11381] program syz-executor.0 not setting count and/or reply_len properly [ 2211.953456][T11233] XFS (loop2): Invalid superblock magic number 06:50:54 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x42534658, 0x0, 0x0, 0x0, 0x0) 06:50:54 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x41}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xd000000, 0x0, 0x0, 0x0}, 0x28) 06:50:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x6c000000}, [{}]}, 0x58) 06:50:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:54 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xf4ffffff, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:54 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x4, 0x0, [0x3ff, 0x2, 0x1, 0x7, 0x93da, 0x4, 0x3ff, 0x1, 0xffffffff80000000, 0x0, 0x6, 0x1, 0xde, 0x6, 0x6, 0x1]}, {0x9, 0x0, [0x5f, 0x5c9e3de1, 0x40, 0x2, 0x7fffffff, 0x1ff, 0x3, 0x5, 0x1, 0xfffffffffffffffc, 0x8447, 0x1ff, 0x7, 0x1, 0x20, 0x8]}, {0x24, 0x0, [0x100, 0x5, 0xb7d, 0x9, 0x33e, 0x80000000, 0x40, 0xf5a4, 0x8000, 0x1000, 0x6, 0x3, 0x4, 0x2000, 0x0, 0x101]}, {0x20, 0x0, [0x7, 0xfff, 0x2, 0xff, 0x3, 0x2, 0x7, 0xc65f, 0x8001, 0x5, 0x761, 0x8, 0x1e, 0x6, 0xfffffffffffffffd, 0x9]}], r1}}, 0x1c) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x2, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000100)=0xfffffffffffffff9) [ 2212.776875][T11604] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2212.776875][T11604] program syz-executor.0 not setting count and/or reply_len properly 06:50:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x74000000}, [{}]}, 0x58) 06:50:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x9}, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x12) write$nbd(r1, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x1) write$nbd(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0d73f81042d20894e15320bc4e8f4b9c38ac740b3b5f676d47b7df0f96030eafe5a4d5f2cd40c80e38f7cf123fc2b4f312d9055ebf34c6a4be7f4be280140b394832db307c46d7be85ec0416a59d30ba30eb7415e5667c4754e3795aa03097d5985a6b3b0911"], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x440, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000080)=""/62) ftruncate(r2, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000340)={0x13, 0xfffffffffffffdb5, 0xfa00, {&(0x7f00000005c0), r3, 0x1}}, 0xfffffea9) 06:50:54 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xf5ffffff, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2212.968947][T11615] XFS (loop2): Invalid superblock magic number [ 2213.019803][T11761] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2213.019803][T11761] program syz-executor.0 not setting count and/or reply_len properly 06:50:54 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xf6ffffff, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x6}, {r0, 0x8004}, {r0, 0x8000}], 0x3, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={0x1000}, 0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x480000, 0x0) getsockopt$inet6_buf(r1, 0x29, 0xca, &(0x7f00000000c0), &(0x7f0000000100)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r2, 0x0, 0x0, 0x1}}, 0x20) 06:50:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x7a000000}, [{}]}, 0x58) [ 2213.273992][T11940] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2213.273992][T11940] program syz-executor.0 not setting count and/or reply_len properly 06:50:55 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x47000000, 0x0, 0x0, 0x0, 0x0) 06:50:55 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0xe, @raw_data="2efddb2424f7b0a2a2ec3f1b0d14bbb78df3107bb3098bf8ace719c92aab0776ef3d00c07f74cc6b0ac5df84365d5030be546da186a66a83bcb2cd788d65bff8077b984d185b416a1c7e88f59a939285b31020d38d41b6885089a4ec4d332b352722a1e733b7070e63fa31324ab4402caf73584276d0e67e1f6cff59d82edd0c62a44c03f877711891da325ebedb8a272b1c4fe68a961bf8239776c7ade0e33b575190b350b086c833ce4fc581298ae61f9c604e882c8a48f792fe06f81267e006bf6c2aadc74458"}) 06:50:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x14000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)=0x0) ptrace$setopts(0x4200, r3, 0x8000, 0x100040) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) write$P9_RLINK(r2, &(0x7f0000000140)={0x7, 0x47, 0x2}, 0x7) 06:50:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xf9fdffff, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0xbfffffff}, [{}]}, 0x58) 06:50:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0xffffffffffffff42, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x21, 0x0, [0x0, 0x8, 0x0, 0x4, 0x4, 0x1, 0x1, 0x401, 0x3, 0x101, 0x8, 0xafb, 0x5, 0x200, 0x3]}, {0x32, 0x0, [0xfffffffffffffff9, 0x100000001, 0x0, 0x7, 0x10000, 0x70cbc4f0, 0x9, 0x0, 0x101, 0xffff, 0xff, 0x2, 0xfffffffffffffffb, 0x8, 0x8, 0x7]}], r1}}, 0xfffffffffffffc5a) 06:50:55 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x227c) [ 2213.512093][T12050] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2213.512093][T12050] program syz-executor.0 not setting count and/or reply_len properly 06:50:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xfbffffff, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0xffffffbf}, [{}]}, 0x58) 06:50:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x8, 0x12) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000009c0)="0e", 0x1, 0x0, 0x0, 0x0) 06:50:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xfcfdffff, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2213.708024][T12106] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2213.708024][T12106] program syz-executor.0 not setting count and/or reply_len properly [ 2213.873744][T12099] XFS (loop2): Invalid superblock magic number 06:50:56 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x48000000, 0x0, 0x0, 0x0, 0x0) 06:50:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x100000000000000}, [{}]}, 0x58) 06:50:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000000c0)=0x8) timerfd_gettime(r2, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x80, 0x0) 06:50:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xfdfdffff, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:56 executing program 5: chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) syz_read_part_table(0xe01f0300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="009000000000000000004c00000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:50:56 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000003c0)={0x3, 0x9}) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000300)=0x5705, 0x4) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000080)={{0x7, @name="86b1465d12c1802cb3924575839711da42475763bbf9365b870714b5097201ff"}, 0x8, 0x7ff}) 06:50:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xff0f0000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x200000000000000}, [{}]}, 0x58) [ 2214.816849][T12419] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 06:50:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = msgget(0x0, 0x40) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000140)=""/89) r2 = syz_open_pts(r0, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\n'], 0x1) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000300)=""/208, 0xd0}], 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x80000) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000080)={0x1, 0x2, [@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x300000000000000}, [{}]}, 0x58) 06:50:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xfffffdf9, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2214.869340][T12419] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 2214.905986][T12419] loop5: p1 p2 p3 p4 06:50:56 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x5, 0x6b4f00) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1ff, 0x5}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r2, @in={{0x2, 0x4e24, @local}}}, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r0, 0x0, 0x0, 0x1}}, 0x20) [ 2215.026529][T12727] XFS (loop2): Invalid superblock magic number 06:50:57 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x48010000, 0x0, 0x0, 0x0, 0x0) 06:50:57 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xfffffdfc, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x400000000000000}, [{}]}, 0x58) 06:50:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000007c000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) 06:50:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000140)='vmnet1\x00', &(0x7f00000002c0)='self_\x00', &(0x7f0000000300)='trustedvmnet1\x00', &(0x7f0000000380)='bpf\x00', &(0x7f00000003c0)='eth0\x00'], &(0x7f0000000500)=[&(0x7f0000000480)='bpf\x00', &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00']) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000000580)=0x9, 0x4) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000700)=""/168) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x20000, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode=00000000000000000177777,mode=00000000000000000000001,mode=00000000000000000136340,mode=00000000000000000000002,mode=00000000000000000000000,mode=0000000000000000 106331,obj_type=/dev/infiniband/rdma_cm\x00,smackfsroot=/dev/infiniband/rdma_cm\x00,\x00']) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) r4 = getuid() symlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='./file0\x00') ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000640)={0x8, 0x4, r3, 0x0, r4, 0x0, 0x1, 0x8000}) 06:50:57 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xfffffdfd, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2215.827908][T12968] sg_write: 4 callbacks suppressed [ 2215.827921][T12968] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2215.827921][T12968] program syz-executor.0 not setting count and/or reply_len properly 06:50:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0xffffffffffffff6d) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) mq_getsetattr(r1, &(0x7f0000000080)={0x7fffffff, 0x3, 0x9422, 0x80, 0x0, 0x1f, 0x0, 0x7ff}, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x500000000000000}, [{}]}, 0x58) 06:50:57 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xffffff7f, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write(r0, &(0x7f0000000080)="61590ce1799015cb3522b205a2713777b28608a0b5b9c87b95cc858e9282", 0x1e) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) [ 2216.081743][T12976] XFS (loop2): Invalid superblock magic number [ 2216.096013][T13144] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2216.096013][T13144] program syz-executor.0 not setting count and/or reply_len properly 06:50:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'ip6gre0\x00', 0x100}) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:58 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x49000000, 0x0, 0x0, 0x0, 0x0) 06:50:58 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xffffff8c, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x600000000000000}, [{}]}, 0x58) 06:50:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0xffffffa9, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0xffffffffffffff40) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:58 executing program 5: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xe01f0300, 0x0, &(0x7f0000000200)) 06:50:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) clock_getres(0x0, &(0x7f0000000080)) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x7, 0x2, 0x5, 0xf8a6}, {0x2, 0x5, 0xede, 0x5}]}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000380)=[{0x30, 0x0, [0x100, 0x5, 0x7, 0x8241, 0xff, 0xffffffffffffffff, 0x1, 0x4, 0x401, 0x0, 0x7fff, 0x1, 0x3, 0x1ff, 0x0, 0x1]}, {0x1, 0x0, [0xfffffffffffff37e, 0x3, 0x7fff, 0x7, 0x4, 0xfffffffffffffff8, 0x0, 0x6, 0x1e, 0x5, 0x4, 0x9, 0x100000000, 0x8, 0x9, 0x7c24]}, {0x8, 0x0, [0x9, 0x81, 0x100000001, 0x7fff, 0xfffffffffffffffd, 0xff, 0x759, 0x5, 0x9, 0x5, 0x2f, 0x2, 0x8, 0x400, 0x5, 0xffffffffffffffe1]}], r1, 0x1, 0x1, 0xd8}}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x2, 0x0) 06:50:58 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xfffffff4, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2216.967709][T13336] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2216.967709][T13336] program syz-executor.0 not setting count and/or reply_len properly 06:50:58 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) sendmmsg$alg(r0, &(0x7f00000010c0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="c6cb36e9109b6061b54d07a272ccfdb6d4a200182c81f73b", 0x18}, {&(0x7f00000000c0)="e397d5192c99afaa43c0893227ae5420011c48c6085f16a1b657c57a27c7d48518397d4eac370daac69fb9f4ae13f6b990297095", 0x34}, {&(0x7f0000000100)="3b1721833a0501c9303aa9bbc96aefc964397095846223507d4c2ee000f0ed15ed346ed07ab1ad80780c793da89cd87ba9a440c3bd2cff0339e360c535bc8cbd93243fa426", 0x45}, {&(0x7f0000000180)="5ae7ea6eb5406112906e7000939b3af38255f67ffe1acae89b3daae761d0675fe26a456391ad1e529d1a0ee8ea5a60d42a4d25822301b6bbd43b1f73c975264d9f713b44aafe848fe400fc1ff321b9a820b801e6b3f530df57aa0e4e33611df8fecf860f8cccfe6cd79fcf31b64406e1328bed9b9936bde64b7b0d4823bdd3cc52434b64d31f23eb5bc167becba078e2ae78e26d16a708e8091805687181225dfd4ea7e865d1dcd9daf6ad47c7d71fc2d8f84c1d7e7525a1d362a5ec63086d848d5510996e7839ba6da569bf28130afaecef6e6fd831c04f1092ca67ac04ebca018a09252577436b485529437b937ddd59", 0xf1}, {&(0x7f00000005c0)="a2350614b44b20406d9d04595c183db32f5de760e5e39ddf4f23564c16f4f686f4109b6490e4d2aa56729a71f2d63fbcd24f3700a9503a9551e26b4f050933cde3c67d6c6f8b7d0249e9c09dbc336dee940c40c2def38d3e2758b7e7509e0901300a32aa81897eee235184e6531a62d381395c3f1a2aa843864691d21fd16dbdd7c3d6747107c5fc0accb034f297ff7e4bf9e90e723a18e9ad7dfbbe554f903727e1d77054353e05e061e6ef9d3ec81ca4bfa32bee42965e14678003b07c6f1af34bebe84b6d5de3f97e272996e2ca3f3645405b8be4fe064e1955742700220d50", 0xe1}], 0x5, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x140, 0x20000000}, {0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)}, {&(0x7f0000000800)="2c8cd6982d21c422e5a7b87264f52d732e75fa3a58f20272e056b8c0f1db30a35be982983a8c7eb1b8575b740538a10a5f69dbd0e7e37b8a0540fb42b0bceeb37b15138040691d5c052213fa20f64baa7810c8e2c68febef4bd976f62f88f1b233eb936968255cf844c4a1c746ddb6f02bad7b5f5b9c48c4dcbca48560e91170d0f67230f0bbd832a24912bfd028019181b0b884fee7d73ae16006c6c100cfddf7ada7ec9de08424cf37dd7a066cb0254ccb49b75b63ec7f3dac7d6f3218c5e76285ff0d82399817085d0eef06ad2fc0c593b0d7d0d53a15bb1a383992c4456857f245ef3f7783aa7f5d210971a5b56f13ba257e", 0xf4}], 0x2, &(0x7f0000000900)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x44}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x78, 0x1}, {0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000009c0)="e03bf749aa8cd704e382aa393f3854e8617d9580dd959bd3ce492c19f64ef4ffb468d3ca8ff9838cf3abd638b4e161a2b49b22c581e7012f0f06fa12868f8272d12c223507703965e44baaef44c08d932f295d3a7ecbfbd11cc6bdae66f780b50411e27497746245d54e4d9603c7dfb0c7d250e2feedc35321aa497745e03c6cf08ccf9a9242e6a4b4fab81f5be338c4c16820b686b3e3aadd96ae2043aa5a473b8d5895bab32b154a82e36a6ca2625064982ac54b9dd4080e73354e48b083", 0xbf}, {&(0x7f0000000a80)="7b0793b0cefa95acb2488bb46984278a5544f8d457632b70e5cf01c9d4c8b1bba7bb6a5ff1d667907f37885506b7c640e4853f5f58d531f7a9bafd6f147fb4b7690bd782cb121b4c3073d1e0ad69590fcb8b84df3848c055d3fe6b66d25def091cb9fcef6a3acea446bde3b680547f879f5fc675ec3b507bc6754cdce2c1fc691f9f29f7db2dbbe59f27", 0x8a}, {&(0x7f0000000b40)="681a899e862b34e367dadf8502e146336deae7ea4e16af6e56ba9f5ff83be5a9380d6085e8ac387fc1aeb01e35797f52e4f0c314019eeda13e69342b8ae0633c428e0386f090dded5fb47ddc7eaf46d2849d375f4f3e7765179570ff17459fa29e0cdd549f7270a457c3c5e13f07b4663e0c081e8bae5c0ea4fe80a3260a20e326cf23494b2f94424faa4d31b03062ee4be42d501644c8b24f10d25c82af86eea4008f36ae271a853ea2b147da9a75d543", 0xb1}, {&(0x7f0000000c00)="179e0547bb5b31042cf496861dddc3a66fb9064290a6cc2400490bf5698492485e50ca478f3b05441276ef1052bb10128d5fb15e7df4f42387d5f30884d4d0c894c2853353651ac9de1e2cb51713ee1d21698655ddcb81d52101d30992a311d349130339c7ea8518c53b352f95eb7f68c7e4b1833da0e6b8564630e55ea0e02b14e230c5736c85e9d217db210680128996e89f1db0456447b11963d50d6eb1398e60ca43d2aa5f6c213f3cda01adfb72", 0xb0}, {&(0x7f0000000cc0)="4981dd521f650fc655a7b0ee52ec13d5b679a5115ce406e7652e105dea1d7872b02f4f48f8e906478dd4b29ebddb8e1539f74a626c8c936826b0", 0x3a}, {&(0x7f0000000d00)="d7c9287290e5bff2a02c09cd29315924f0625330cfc0851cb37cfcc539dc8e09fbb5720d552e917f4cdc771b98a758ca3a208701d73d5815afb4b28f1cf3d9d64132a82d730020d446dc4bb8c20d62cb7ded5188c60e742babdddbaacec4b95608f31b5b654b0fd5c64d33ac6ace7df9f5a33499712afbf5a601af3c63a26f9d57284b4cf91dbe84842b0d931e9e073964b64eec51e2e7a49c0cc78564e54040f18ace6c15ee33fa36aefa9d1e709fb2b28dc4cdd896e58b7afccbccf0970d3865c244321eb130614e6773aac4e9984a898c899103203d4a5b4bb8fe620735d7fe2493", 0xe3}, {&(0x7f0000000e00)="c347d66359cb56f1255e890b1ab01a647ad2d94c43891cd8398f4eb97b75ee7427e11cd366ecc4e71354", 0x2a}], 0x7, &(0x7f0000000ec0)=[@assoc={0x18, 0x117, 0x4, 0x5}], 0x18, 0x40004}, {0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000f00)="06abf395a2c52368e33ad242fb19b858c3170bd6d2b7896dc09deabbf1a4facf63d7ac256e094511a3fe744a44ef1b09e4f73e455da283cccaefb8514410f397728f2a77564fc621b21f0e1374d1f40d3bd6b6964f3bc95cd451892d75edb2fbe6", 0x61}], 0x1, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0xe8, 0x1}], 0x4, 0x800) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000003c0)={0x6, &(0x7f0000000300)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000400)={r2, 0x1}) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000014c0), 0xffffffffffffffff, 0x1}}, 0x11b) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000580)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000006c0)=0x18) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x8}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4) [ 2217.047324][T13336] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2217.047324][T13336] program syz-executor.0 not setting count and/or reply_len properly 06:50:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x700000000000000}, [{}]}, 0x58) 06:50:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xc35a, 0x400080) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f00000000c0)={0x1, 0x7}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r2, 0x0, 0x0, 0x1}}, 0x20) 06:50:59 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xfffffff5, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2217.179816][T13380] XFS (loop2): Invalid superblock magic number [ 2217.210851][T13534] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2217.210851][T13534] program syz-executor.0 not setting count and/or reply_len properly 06:50:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x1000000000000000}, [{}]}, 0x58) [ 2217.401931][T13781] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2217.401931][T13781] program syz-executor.0 not setting count and/or reply_len properly 06:50:59 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x4a000000, 0x0, 0x0, 0x0, 0x0) 06:50:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x5}}, 0x19) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r1, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x7, @local, 0x4f269869}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:50:59 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xfffffff6, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:50:59 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3, 0x40) write$P9_RLOPEN(r0, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x20, 0x3}, 0x7b39}}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r2, 0x0, 0x0, 0x1}}, 0x20) 06:50:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x2000000000000000}, [{}]}, 0x58) 06:50:59 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="10e7"], 0x2) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) 06:50:59 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xfffffffb, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2218.052888][T13793] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2218.052888][T13793] program syz-executor.0 not setting count and/or reply_len properly 06:50:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x4000000000000000}, [{}]}, 0x58) 06:51:00 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2218.212578][T13972] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2218.212578][T13972] program syz-executor.0 not setting count and/or reply_len properly 06:51:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = semget(0x3, 0x0, 0xa0) semctl$IPC_RMID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2218.270654][T13840] XFS (loop2): Invalid superblock magic number 06:51:00 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x5, 0x81, 0x7, 0x100000000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0xffffffffffffffe1, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x20, 0x0, [0x0, 0x7fffffff, 0x7f, 0x4, 0x5, 0x6, 0xff, 0x5, 0x1f, 0x1000, 0x401, 0x5, 0x80000001, 0x1, 0x2, 0x100000000]}, {0x1, 0x0, [0xfffffffffffffff7, 0xffff, 0x800, 0x4, 0x3, 0x7f3c, 0x80000001, 0x7, 0x100, 0x5, 0x5, 0x7f, 0x4, 0x4, 0xec2, 0x2]}, {0x8, 0x0, [0x80000000, 0x6, 0x0, 0x2, 0x27c4, 0x0, 0x20, 0x2, 0x20, 0x5, 0x1, 0xffffffff, 0x6a, 0x7f, 0xfc, 0x3ff]}], r1}}, 0x20) 06:51:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x4800000000000000}, [{}]}, 0x58) [ 2218.457659][T14069] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2218.457659][T14069] program syz-executor.0 not setting count and/or reply_len properly 06:51:00 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x4c000000, 0x0, 0x0, 0x0, 0x0) 06:51:00 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xedc000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:00 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) 06:51:00 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) 06:51:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x4c00000000000000}, [{}]}, 0x58) 06:51:00 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x98ef, 0x341040) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) 06:51:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000100)={@rand_addr="0705b5a46cc9aab4879c93ab6d2fae49", r2}, 0x14) [ 2219.080947][T14266] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2219.080947][T14266] program syz-executor.0 not setting count and/or reply_len properly 06:51:00 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap$perf(&(0x7f0000287000/0x2000)=nil, 0x2000, 0x5, 0x13, r0, 0x0) 06:51:01 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x6000000000000000}, [{}]}, 0x58) 06:51:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x2a7) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x8) write$P9_RREMOVE(r2, &(0x7f0000000140)={0x7, 0x7b, 0x1}, 0x7) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000001c0)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0xc0, 0x0) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000480)=""/4096) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000200)={0x8000007, 0x4, 0x2}) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000001480)) 06:51:01 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xfbee, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2219.292081][T14357] XFS (loop2): Invalid superblock magic number [ 2219.678121][T14357] XFS (loop2): Invalid superblock magic number 06:51:01 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x58465342, 0x0, 0x0, 0x0, 0x0) 06:51:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x6800000000000000}, [{}]}, 0x58) 06:51:01 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adcb67d3c123f3188b070") r1 = socket$inet6(0xa, 0x80002, 0x100000000000088) bind$inet6(r1, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x800, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000100)=0x4, 0x4) r3 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f00000001c0)=0x800000000000003, 0x4) getsockopt$inet_mreqsrc(r0, 0x0, 0x2f, &(0x7f0000000140)={@rand_addr, @multicast2, @broadcast}, &(0x7f0000000180)=0xc) sendto$inet6(r3, 0x0, 0x0, 0x8800, &(0x7f0000000480)={0xa, 0x4e23}, 0x1c) fcntl$getownex(r1, 0x10, &(0x7f0000000240)={0x0, 0x0}) sched_setscheduler(r4, 0x3, &(0x7f0000000280)=0xb3e) syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) sendto$inet6(r3, &(0x7f0000000d40)="dd", 0x1, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000000)=""/105, 0x69) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x3}}, 0x18) 06:51:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x9}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000c00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/91, 0x5b}], 0x1, 0x0) 06:51:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) poll(&(0x7f0000000080)=[{r0, 0x1}, {r0, 0x8080}, {r0, 0x44}, {r2, 0x4000}, {r0, 0x9040}], 0x5, 0x7) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1, 0x20600) [ 2220.190352][T14513] device nr0 entered promiscuous mode 06:51:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x6c00000000000000}, [{}]}, 0x58) 06:51:02 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x7ffffffffffff, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) msgget(0x2, 0x627) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x113}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000100), r1, 0x3}}, 0x18) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000340)=@caif=@util, &(0x7f00000003c0)=0x80, 0x800) bind$bt_rfcomm(r2, &(0x7f0000000400)={0x1f, {0xfffffffffffffff9, 0x5, 0xfffffffffffffffd, 0x7f, 0x800, 0x4}, 0x6ca1}, 0xa) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) 06:51:02 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xe000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:02 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000006c0)=""/223) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r2, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:51:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x7400000000000000}, [{}]}, 0x58) [ 2220.425912][T14682] XFS (loop2): Invalid superblock magic number 06:51:03 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x60000000, 0x0, 0x0, 0x0, 0x0) 06:51:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x40000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x10002) getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:51:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x7a00000000000000}, [{}]}, 0x58) 06:51:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000480)="89ea2e7b8c53b14efd4fec026b8ba41e05ee074db1b22870388de4934a3a11b50bb5c32150d854d58bf35696960ba289d339cf2220b9640a192c98ab899a648da5118f9cf9efaf1b84f7cbd69f27aecaa1e9e9bcb7a59cfd4ed6865738630a2150fd52a77d2a0c24a4ab31eb9823b17db39b49fa733d7e4b8911c27d0484f3bb294549cbeeb4ceada79292957cf1445c73f01bf494df1f03adea6cc0f1f88efab3e1c9384230a6e589576c3b5a41836adf09d1aa0a8e01f3f8068aeaafb93f11c541d2ca1b49396ed31de69b46394013c3652ee56d16cdf67b1521543ec5f50e984cd3bca4461d8b262f7203a675759ec76595df1c488663694d9099bc1f38420bd9cfc6602792a13e2c744be57ace55fe4cd1d4fcc863edba1d3997793706369e853c6dab49018820ab7ddf79391c7e5f65338605cc5cdf917159c9d5bc16cbcc19d285ce9d467006a13cd3c496e437a96cf0188b181db3039a7640baed59645875859f99c29777dc740ef1bc3836645bee3a56b8ef7c31392d6ab510cae17f64e0c237091359f5fae4e9518cc7a0b42a081e56797b54ee77204bb7668f1c596d5898ad1fa0a4b3e9455cb86f4b46acad2867c56cf3e7ed8b9c4cb092307f948fbbfba17575ee1b907977d5868709323708d0524ebe5285a27706406af51787a41583784ae38e7ccc52556cdb853da98ee859fc8f5adf74d5200578158b7616d98f633ec3c65673fd0559c0ab6002f0509e194c8eb3c3121dbcfea02da266f64d6423c3ef219bc2bd82194dbb5d794f300bfbad92c45190d5328c62b750c9e7187c8a65614966b784d2ac1bcc3a91aebec5fe5824795a1db2cecdbba324aa6d22d7e77d6b3d671b03f09de2cc5f0b5f5260c33751c233d005c108592cceee42191e108a2f0cc508258fc400c1b253b5b83402e3f16e1d7221928f73ebf05546c5baa517462996d9e542f7ebdf145abd4356154f52bb9df28a709c941b796d96aa00d0e5f079178b99bd87e5d444ad3230d8b66fdff4c1782d53f67b5a7a43327781d4be061c6bf917350d8332af528b77c00a185869e63c67381246646a7ff18a58219c2d364069cc415c5fba99f65620ab3a6eccc4b94e7987f00879ea71c83223683496c8229730045845da6db52a5b7c4990dabd1717d7ded65713b16c119c04c8a0f3b05078c0473633d82cee904dad5ba6aee7accf05146c693a047c9d888e8c5f7fb71b984a271ab3367279a9baf4abe446cf2b22393c88171ad296aae58fce6e80534b547b82a18193494d4da74da515578bec57797f599abcd77e1fce8bbad08137df24145e665309d028ffb3b5d2313064dc9a735c83b1d83979b233c9f6af12e9337a67996259cd51ddc885e55788d56dab50b9037298afb5c31213f30fc08238e9bb5c16a48243fb2e6d3b95d84e3a5a0be31a63ec73134f09bfe40f6d29b9fd1dd081c3f08192ab172d19f21e8e8f1424cc0519f2ee8f3a2d85121b4cafe3bbe04ac7f05d778f821ca9d00275b7f2e84dc40e3744c33af2f4593fdff594736939e3692c4bb2dd515afbfaf60158fad3252599c5c04bbf4e42c81fb0ec1f6c045aa9d55ed417c93df5cd3ba1da1a1343ca395549c747559c68c70dddb79a05e191e9a5528a44759322c6b6e13d6032d2e4208608e458d25d3065c931b2065ebe43702a269b26d44e863ce5cde3df4adb5591f3e2190977b43e4ad69a323e6e9880df8b113e4f11e498cc12f600477246b9383c6ff28e28bb93f7e7967086959a75d1e07d04334b036b7b4615d6012ea0ab0b4eeb8a90739941f328e0ad1e77d033f025114ecc886d0d4c15f95fbfe557efa7411e580bfbff42c12dead70e07a7a0bd898dfec6323d6c5e5dc88b2ca4a5330d9dbd6cb8f1d2b5942aa5c17cd45ee265fa1cba77728c7d6b1a4af84dfe5aa5a01c7b73b01d5c42e5541b922f8e3b3cf167f5257be5b5a56373591fb9e32653d431c6674d023b0527f0a4d671e235dafa3dad8ea1b50bc6c443576e92571cf868c87caa9ef5e1a5bfcb7e813111824ba468bc3bbd84c0ed7d1325d861ee0b8d4984978fd62a51ec0eca712d639666739fb80d96507bf15df93f817f780d9abab91c13285822a78e7e5be164819bbd9a35bbddf186d875083b448cacc81281f2ee503a18c10bc9223a0701e658390dc4bf69b53e93619b98f5a9fb11dd83546ba74da9c32605012040150ca971a919d15740a377255dd9c7c8a78473ac7bb3f859c1fc25ae7cf64f80516d880d648d618f244240afb32040f02903f3fbd7df41fcc8e690cdc67b4b627b8773b14a1b2b26640dfd055b348a5cd772aa2244b307420a5ae4b4b5133ab77ec0090275c3711ac58e3df7d01ee4d629665bc95a30fae9328271c893aa6506a338ebe1fb91006195132f88ef50dd9fb5ccd77c0436a8e46a2808fb0bc7890d2eff44456648b563a859ae5813201e27b0a58c40a6609fc9e88055ecece4b96bd6f61c845a9e835f0ca6589deb456d445f984297537fdd213ea035c4e308dad26cf7930b8655f21c15ec60ed0f91050807eae031338e9fb7a182beb6479fe66e90dc3980750333f6b88bf8d40a9ecd333616531bb762520dc73332a0e1f1d0ae5e170b0947f184d9d7c63070b1e8719695286fb7ad0f98af7baed3b349f51369d0d6226bcc0bcf670d16b3183bd3c7615cda4759083ac26c45bc18f9059ef6b746ae80b2c9e47190cf092017f22271987f09ecada8a8d00ed831462fca85b20f7beae22f273c95f405ecf9e35511167f509b86e93ca0311cdd08c44ce4313531bb47fb66b7412710d98fa4edb0b12afc674db9276cb91de6290fa7b09319480fcb86176f76805bdc7776220bf7b3a8fcc3458874a053064bdbb7444e7f910439c3e1ca53199f2346de7a5dba84d186eef745588216149f77b3a4c28b3efca0d07a354d7697a72e58c538d23aa8a59925f00f54461a2fbc500ae1e41b7b991c29149b97eed852980debb9ba0a15ea2c143b0adf1d8b39e0d513ef873b39d42278987c80a8c572cf0164ba41354fe1eabd64e1b3a5bf37b21d10d03db81a5b14dd6d054cf072da91030fbce276d2cc669d3cba5afc65c13d338cf5b79d0d42a2c2050817513b0938f55118e1fa4f0b76dc126fe6b90e69395ddb95bac05fa0749206c44dd10467c79529db0e20806e8d0da365693f19be83316abe435900eb68a9bd71502eebddd4e275670778cf78ef7175274f719f70698d5ee83fb6b55dba4c35ae278406a1b49c5f0a3f339e5d30b9059a5ece89c2838d6fe67569820edeb5ee3c8abfcbcb7747d062fdd5ab5d2350760675f4d7367016d81b24bf1e61116f1c0d93afe49d8fc9f6627ed060e9de7cc25632eb6eb673d6ad217d9d13f0bc990ccf1665737d56f5c173dc97cd3fdd2a6378aeb337642a7184237089d435507a999e6129a8f32e6ba809a54856e88e4af4c1210453c4e85937415cc467a27bc4b447c4a2edea9a14f9bd6669857fd938ea74bfc560d3b9b4a325cc2aef637446b234dab2c4ded146748eaef5942702d06c4d1e560bc7d30c5242d413be7626d4bb241733238a4f533a8bd5367b7183e7b3a91ef8d7bbecac13bc96d1fd82876a5c585677ad35656f7a58cc94c8cbdc0be8bc98632437bd92a424572465d48eec0101001610b0d25d1c13d4251aac0b4502a763f678e8b2a157781390eff36cefd78d75eb743213e78dfb261b73c75ed4b5a5823302ebe96b803bb1fe616522a15d8ca94c8a92fd51500bdb026e9adeb4de65512c7912f50a9984fe1a936d10575fb1ef455a65bdefa9575e192f6e5b4189eee47c596543394c8d2420e17311a2e58bb0fa56ebd2d312f14c72ae94b7b7cf94654fdbcdbfad0481f8a03da7f871b46a1d853730d51e6ee55a1c0cda20d92866d999ea77fbe117b147c851a80570d6b93e91319dcbe2c935b9a7e02414638f16207df461bddc48f229e2791d3489f0cbfb5a0110b13dc5f4b6e5dc735e99d9431265e1e692410435182b353c5ee3d0358d9dcbebcde76eb344d793f2e232526b4019d593e23d1b606cd5108256c8b653d64ed34cca27085ef0e308de65e11727fe155cdec071d0ccb1dc782d139483dc2988d5b7884976bf6f4f5b921f283bbc5b320e0d1f6c38c5745d104d4fccf069241cf8f159c66c965aaa78b7be865ed4a5c67cca7c950bcd177d7a40dd784e1c9dc91ae82e3a9bca5d850abfefd4f918771eb0cac280f4908f5f626a2dc487e6f9d8cd31c28121e018c6e01ad25be9621e54ea62a15941df6e2f525c54ba778a90828d18e2a4ebbcfa9eb1e0f3f931f7be915519f7022425f9204a5be9c8aa53b80d678f76b799af5bae6152561efdaf905c2dbac45462921fa54850ba11ceb4f5d743b22d07cfb32bac52370dca31ee8c99649ef71f2a43c6034db9c69e566a9e64a424e61dc9f097e846946a0a72d54cad0abff9dee39e2fee659049c2396d9eac4ac14d3bc99c6079a85539fc501b404ec0934a2c6dcde3d424e97e21293cd26be3e06a3c7f0ceb8e0a1b93527454609d05aa92b03e8027499ee4a79513d3c01af98fb2099131e98a44d915931dd1509fb50454af764dc9beeb2d614c60a26402b0ad1b138bd092fef9411e0c29d81273eac23b5b051ffbac33f072310dd8a878baa7524bb1a0f89e9dad9ddda85c06e9e8d0512f310fdddc11c282d985e1f1157d28ed09f47098a8b40113b95d0fa294da263d7a38924f995659c30b891b35c88c03d93239bcae2b7f682ae278a74edf4e3f9345b9177c7c5558a7e3846f7fbd373081c055e3eaa727621c56b576e793c662012f0ff2d210067b1d5bd56d2f4dbebbfdbfd39a830b61c32923054cd27f93dd025270e2c896b606380932deb80b3a8d7ab8e0b2a476c7061cd18c6955a7ffc61e869dece1fc1161e349a54ba233eacfd29a0e2e63302703c6bebc12e91cf9b90182d5420d62b8586d996f475a25573d4dca6ee59c24500a559d09bbd5720fd01a54d9ff2ea24b490e0f754df50b644388a8f25fc97364f276d005b39f2543363d5d19c81d73df7b26ecfa462520d2170bedfa8e95e89c00967bf1fc00a2df3fa8e29983d0fb13e2c59a9f57e870c69ca85e5b51592fb428b5ad6da7701f2a2e5d1a11a8eb0088d422a16c082adbf831e37e02b3b52d5c4851d9db4201d5d72e33a6e64f043403112ac7a96e834f233c199bde6ba134625c991b0b65c95d0882106051f23fcb5c1cd5f7d7fb231632c0e4d2059b8f1bcdc3d16af8be781daa31ada5fba7b5f2308ea5723c2bcefacce5e3e77634d528907c6b561ff1f9adf3e3adb6383e1cc8c071c6002c5bbe33de46f4cb1f36bcb6b7f254beb4af951ab8a16abb9752bac10ecf2b7ed9db27b9537a0d9960c48e38bede9b8363d5eafab5f7f4c62819a867570b878aa4c6cd98b5f63fce8f0253624cf40e43be4be6db2426c6813ac34d8015fd4df71e55feb150fb5234b22c81ca3c32eeef73b2cad23202f8ad7e56fd8d1f275ac28616202ac67c790ebb0a4788ae26b2cbfd73f213ac4a60158edf90c6efdf21d6bbcc577efec43827177ff7b93616cb88d74b025d7661b7512d2e05f88e26672336402e5561e2b54a1cff1ebf3486fe4d9f25db7155c6069de98218e47375a655d9777caf4e2bf20389e64edd544de45ae823bf945ccd15f3d94945dba3aed740c34f3fb769f1a38050bc4a7e8cea94cc4cffdb5210e19965ade7cc72bcf0fb879c6dbacfa833594a6d3cc982c82aa1b8e82f82267f7100aa8642c1a09aa22841", 0x1000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x2c9) getgid() getgroups(0x5, &(0x7f00000000c0)=[0xee00, 0x0, 0xffffffffffffffff, 0xee01, 0x0]) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x80103, 0x0) getsockopt$inet6_dccp_int(r2, 0x21, 0x10, &(0x7f0000000240), &(0x7f0000000280)=0x4) getegid() setgroups(0x0, &(0x7f0000000240)) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000002c0), 0x4) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000200)={0x0, @speck128, 0x2, "6bdfbfbcc8fa1ebf"}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) 06:51:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x9}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000c00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/91, 0x5b}], 0x1, 0x0) 06:51:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2221.329374][T14965] sg_write: 5 callbacks suppressed [ 2221.329395][T14965] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2221.329395][T14965] program syz-executor.0 not setting count and/or reply_len properly 06:51:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0xbfffffff00000000}, [{}]}, 0x58) 06:51:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x200000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x9}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000c00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/91, 0x5b}], 0x1, 0x0) 06:51:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = dup(r0) r2 = accept4$tipc(r1, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x800) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x3, &(0x7f0000000680)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0xd, 0x39b, r2, &(0x7f0000000180)="ed3e3a55e9f6db3c2c9cfbf6f2e041a60befbd67c67934379b9e67fd8213a15b6dcc931eddaeafb67e2aa3580d9164669964c5b9781033f3daf596c8a2dc9bc0ca19d9b804683c66877e9a7da8233b43e145e267fcdbd829b034d02b60d274b71c8369fd00d37caf274b10bdf09fad21f87417659ae8beb66506facfd270620decb5c88000e6849c0525ee894e8027966fbb71b16e144c95b1c0fd872e21a8d29fd2ac28dbca4eac78365b56045234d3cf89903a65d4247f9af971d56b0207dde85574a04a70625e9e4c15", 0xcb, 0x3, 0x0, 0x2, r1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x6, r2, &(0x7f00000002c0)="25d4004e981bc11d25433488245c314873428d90af4b8a49b6996dc7c6b5bcdf12a38f64a8a390429f68e167538db039d6627d935ac43d3d948743a5a660f9ff98c2f8ba2511eb", 0x47, 0x0, 0x0, 0x0, r1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x100000001, r2, &(0x7f00000005c0)="6aab979bd6b5c0c6131bfd580a0c49bf622dc24a0eba2bb9af1602781e3a88dac0531167371c4147cbabc0bf16164e29a86b0cda373262ede3415e7275e1e78ff54b81306290e0657a1ba16937b8e90c6739dd63f68ec76f3d12eafd1eb040fdf01b4c5fbe4706b83ff5c8730e11ffdde543b14392764defbd3e6ea42fd1ba", 0x7f, 0x3, 0x0, 0x0, r1}]) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x9}, 0x28, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2221.532581][T15259] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2221.532581][T15259] program syz-executor.0 not setting count and/or reply_len properly 06:51:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000080)='veth1_to_bond\x00') [ 2221.579503][T15071] XFS (loop2): Invalid superblock magic number [ 2221.612308][T15259] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2221.612308][T15259] program syz-executor.0 not setting count and/or reply_len properly [ 2221.691811][T15296] device nr0 entered promiscuous mode 06:51:04 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x60020000, 0x0, 0x0, 0x0, 0x0) 06:51:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x2}, [{}]}, 0x58) 06:51:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x300000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:04 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000008a00)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x1, 0x7fff, 0x800, 0xcd4, @random="dca532618387"}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000180)="deb263f33a317a4938c1c388ca1ca61a59b0fac8dd6af2bbd3ea43ca99f05c30c5cc415942c60f81ae044d70e64ee549765b5e23b52a4f6036a96d7dc8f2527123792850947bd877af135fc99e6ec6cccd544bc31a6c9b99fb51a9fbd683a8d4c1858c13240cfd51aa7f54d4a6d2741e718a02b6868731d1a8b52079e6d8f6d9f132c047ac3132fe223ba9f3c9468bc02728f600a2e23f984663d5a4088cee8820090d639db291adfe0f46ffcf4f2a116804574047", 0xb5}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f0000000240)="61931cdc5fecd05efd03c67fa6f2bb6c29df481d64a74e2ed9e3423566e2a09526bd464071a2", 0x26}, {&(0x7f00000015c0)="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", 0xfd}, {&(0x7f0000000280)="0f5957e3", 0x4}, {&(0x7f00000002c0)="257ac146164e7cb529d2b2f894043acaef3590a27bcc334fe9dbdbe728fc8ef70ce13033ecf80004cc2de26ddf2289496fd810256142d606962907090006766dbc039ad5095beb", 0x47}, {&(0x7f00000016c0)="ae1008fe74f0cf2a6c865c93e0052b16868994c2a23c4792b1defd90de426519c98b0ae27b38145b7b5c36abaa783407ab026a4a8fd29eda5e6f963d37f76046f9763786b4cb44ad27fe24536cfb03d35be9cd19fce9ab767457ff1e09ada97464f61cc7df9eb50920b192b2a8b61985ed6b46c58c9ea98810b8132f0cedd18b698e6c7c4156292c83cd112ce18bccae17ee2cdd48cc3e1bfc4278ddccfb45c0d3e3885e84034cc105a3d9e24fef37d562a912cdcb33528f29900f7ef18d73662fa291607d476455ba91ebfced43531d63548ed03456bc4f", 0xd8}], 0x7, &(0x7f0000001840)=[{0xa0, 0x108, 0xdc4, "28bd901fbd56fe0892ad89609b8fb229b7f675cdb070afe9d95e6deca09c9c2b02440c773a1fe8fe87396927c1a47f8c2a8cb72c2175f1d8a2740e5551c7c01641c8a7e2904c3f1f5e4b85e7beec9d402257390cb98355b49b096cb10fa164cc7f930072da4415c6ab3b9fde54da9308869c93d908d74991458b15ffd7d27d40a6363b94122c852c874225"}, {0xf8, 0x88, 0x7fffffff, "6b04a2736acf6934c38d51afc56c88f6dbb57e25dd4faacdb9f186431916c6e7991bda380a53cafeb1f718f171fd8d04ee401dc91b8005b142f53b8ee99410bae7cfea16955deccbf3d85f89e89df6262751045ce4bfb814d143bf23bb908c0b3101da15a5edf32f9d0d6aaba4ec966a6dbeaefb8099b59cd71b2918a7e760c92fab3690d266cc071882e7e2b6f6c6a574bf423042bf6be7c117ec485a5af3f048bbb17fce6e628c94b41dcc08835f715ecdb48a9d0ae449d3a24775b49fe395196d01cc2ba870075b755148b87be3bf1a7ebba50972277d5d6867549c5c5da6afee74bc449d"}], 0x198}, 0x1000}, {{&(0x7f0000001a00)=@generic={0x0, "d7a1141a0ff18533cc7255919ef5134d077fd95733fed6efd511f61a73b0a5ddb55e3bd29decc04503a37f5721aef45c64037512671885676d83c2ea6c76c3052450b4a9276b70f190063bae63a514e5e25fa4674c16ed209c3cc6d36dbc555d5bea8b747ce8179d18a9e4f8b2ba93c961010f3efec68d34e77118d7df19"}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a80)="6eb90aac2381b992af2d919284de1eb8e99921ccf18a365001040ddfa3a031005aa8ac77f135e85418dbefe5c1a23db24c17d27e3457483743661e060e9fa2b848e4fa68108ebc872cbe9c57007b2dd3d4fc5fd79571f6e29dab1a8b2dc7382331136bc71568ec93a8f4dd2991a90ec4a85fac73ccd77b46a53628dde30642d2d2d54a2c391b9cace7a6d52624709f622a5cd89868c419b274efea7bfb0bf41d197a8a38e2a85966abb57c1c56ed56c3085231ed332047b946025d4ed3b13e97", 0xc0}, {&(0x7f0000000380)="ab5f70", 0x3}], 0x2, &(0x7f0000001b80)=[{0x10, 0x101, 0x4}], 0x10}, 0x40}, {{&(0x7f0000001bc0)=@rc={0x1f, {0x81, 0x7, 0x8, 0x2, 0x80, 0x7}, 0x100000001}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001c40)="41e0a3fbcf0b33b117241c0c81e7b786ab7caab186a7d3cdf6ac13899060ae25280b6001441e1feb1ba33c8f6b25d8b9329515e85c10a61c37d3a47ab70ff60b3b8d0fc1627a391e7bc4f402cf40c6b38f9e54a6f82a46dbb91df0b61705effe1407bff53b258dd33cecf1face51a519f522bedc0d6152eb241fe9fc91d0db95a806cec0c7c30156b6f64b4592d786efa152b0998cfb799b31723109ba730471d18c384c59321f76bb16236b124f936ac243b3c56874e4665b858f7e6ab42b6fa7cd4991c6", 0xc5}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000002d40)="c3deb1aeb0bed4a6f2ffe9a368aed84bc6e87ab6309c48a156b6cef4d2c0b18889b880528b28eb2c54957c870bcd2af37adfcc0f0c4e8ef7a0e10611330f26f48559631bda88aab41d4318744bffeb99ddd2a2e5078fb951477f16b916bdb5238e2ffe3f13", 0x65}, {&(0x7f0000002dc0)="a149d6c2c53a032f5aecf91e270265f5d8f987879a722bc528b8e3f74bc8300e0602434e6a3c09f1754b1c29dc566fc7375f0a44fc1c44742289c4bca161be2644e99ce798beb0aaf8473737d37a2f43de60", 0x52}, {&(0x7f0000002e40)="41ba97225d3e986d185078f2d9fe1775c374a9af67cf03e90be8036eb3793021e309c926ad", 0x25}], 0x5, &(0x7f0000002f00)=[{0x1010, 0x107, 0xffffffff, "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"}, {0x38, 0x29, 0x5, "d1c2a7918d7a93739887dbd4fbe00651dc35ba1badb855040f5f44a0a5f0e5eea5"}, {0x48, 0x10a, 0x0, "dd3d9181a182a590d2cd1520e8169432f47c8c682fb07af76f17d64ff51df3d2e51eb836874d61d1f0b88aff125057b1b1a1b4"}, {0x1010, 0x108, 0x978, "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"}, {0x48, 0x117, 0x7fffffff, "defde9a86d61fd35860fa58cbdc0815b9da6fedfb71c624d8f981112f2d2b6babf29e94b52981b137da8952cb843ac8b8cd6cc72d3c629"}], 0x20e8}, 0x3f}, {{&(0x7f0000005000)=@in={0x2, 0x4e23, @empty}, 0x80, &(0x7f0000005100)=[{&(0x7f0000005080)="cef869593a1e911e96a626533588acabdcefcf5a8cea133cbf0d4f8cc4e6692ea1365f8790ae3adfb0c95c275e88ebc58dad673b7a913765d20462739717cffe04913a96c2e1", 0x46}], 0x1, &(0x7f0000005140)=[{0xf8, 0x10c, 0x202, "c2633d7e3c93e011d7b943ee881a22c6777261786c305cdc522567b530ac70814362471a04eb9a5ac679a5909721750d0efa8491502578e098d803cdbe6a2954f4404e1c8702c66151317585ed9de1a0c2abec5b6bd5be1f1732562634991198cdced5a737591b8219f65465c4145de70a876527c0faa3bcadf0dd84737c3fd5f6a98c0f9b623d011b8527a59552053acfb3734376940be84824c42dd7f3793ee5f0b940256a0797f93e7cd60ee08a416374ef5b9bb7df0cc5c267863f522d6b9cbaa8f87d7aff3b655b9bf1ff75dabcaa11b17f306338dae758ff2e9dfe4b21cc"}], 0xf8}, 0x8}, {{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000005240)="c4e42a6b678aac9007cbc93d77a635a54a578b265da006d80807af47f04d9ad6157896151de267d9fd0348b63c981f3b0d8f0731ce96695860b139d42ee5b57129934c32cf17adcd68beb3b82f296509659d524040987cd9b447b92c3c06981d2c751918dca26f8edabd0abff705352504baa5d1bf2c18", 0x77}, {&(0x7f00000052c0)="2da0fbf17a3c1b065f3bd0615fbd5e143be11f523d", 0x15}, {&(0x7f0000005300)="99854bb9c3e38be472932b2e2eece857ca94f68c97aac90d1bf6197b7f31c7981e989e5161b201e989f534d023f3d1", 0x2f}], 0x3}, 0x7ff}, {{&(0x7f0000005380)=@ipx={0x4, 0x2fe, 0x3, "58d13eeeb151", 0x6}, 0x80, &(0x7f0000005800)=[{&(0x7f0000005400)="c55acb09984c784e6da8b93503a6f5644a9a44e1e170131043da288b22ee3f43894882ee73085ff653754a9b77e48bdada437f0cec75ed049db4b1c645efbe9d7e2f5ae5cf9df877c6e4d223ff311e26e74d8f0c9ca5c6c0726c1697e008761a21bcd8985c1aaa431e91cfc6c4077d80d2", 0x71}, {&(0x7f0000005480)="d0fe286a9aa0331521c2ef7a1326df8ef353accac9100afadb40e0eecb6e9d1c96b04924ad1fdd6b48328d90137e710af32059306cc776e17f33a97ac149ae95a899f8cd255fa4a694453d", 0x4b}, {&(0x7f0000005500)="5d522c0332fcab53801e8937dab432ccd37d474af0051f6479bf5b4a3ebc1dd6a8a80d662649286b5b63788a969e0b2e6e3660a2e97d3f5e392cca0e9033a14afc8debdf8fd5f4a44771e57df68a0c2797cc241d741de3c0aef304b71939dbdfa52c29053540e83753677012a77f68f35019e8b284350534ff8bffecd4e67692238bd1aedc7344efe11d62ff98b61bf92e954a2b39ea763bbf8ecd11e39e574a856af4f5a5f45d70b8376450cb95fab606", 0xb1}, {&(0x7f00000055c0)="916f2749fd36517098854b9c08a9f206a373c126c790b5289bf882c26ed0db8e29c142602528dc421adef21325dab4b5ec57b3b551ab02b28aee424d529fefa89183c4b8fa46f82c0112387502debf0ea25e6a789fe53f101ff19ceddd9959c5215e71c56b5dc1f9c5b5713c8bca827d6ff5bfc43539eb73f18bd14b77a39987a2414f88a62cc5d747f4b3470f8e899d3126add8e484e58df21c1813de27bc1acc772dbe383efe7d28bf98281eb148a44f3bb602584d4565691a", 0xba}, {&(0x7f0000005680)="dafc4cf9068ab3e10f2867e67bd31c39fcae002dce114bf387b60acd243f47d1113c232e037ae0dfb587de705d10e603c7e2c279a7923070c235c2762d399b2b66db0706e9cf86fbda25a39354de7ca57afebdb1e4e472e4751bdc4b73c8caa9f51edf0b412773ec0c8074c61a27dca73d6dd405efa61583255afb68012b8220c2807a765ec3c94d32b478ccacaa1ae5afba9aebb014937fbe4d75add4dd6ac0d3dce8783dfe9e8ec1a82f8b32187b7bd1ed068feb6e7cc0469ea1e791230f58227bcba11c149c307e6b7904040943556ac3f2b70f", 0xd5}, {&(0x7f0000005780)="25606f51083e61dcb827826b5686527f78c923e225cd75660a2bef1678caaeddc275d9315a8b6ba566fb38a96f9f2fc1b397832286f1cb0ce24022962271e6175999be06f2a941539a9f977d6d2c4a78bd95463e6f6f3cd5bcf1cbf922a8c152c5337e697d85a8b328", 0x69}], 0x6, &(0x7f0000005880)=[{0xd8, 0x111, 0x977, "556c1048ee2122ed6cedcd23fc482e958d2c82f2b618e4fde361efc3c105eb567ba3fa524f3008904f0b182ae1135672f269a6be7c2b65a450373d9ac04cb0ec15b7266fd3cf7c01b182800dc662b110436a4b0a13f911cad02fe6faf870e613b2d9805b3a63c52f43ea43270df4864b575f17c7d24b94a59d88b87fd9a548e90dd8672255d166483230f66746515ce3451255757bc8030d625261818a7d413f9cc7c9e0d5cf2537bf88e9147e13ab0fc0cf4d4d883d350b9ebb3a8ea397173627e36b2e6934d4"}, {0x80, 0x118, 0x8, "e364e6aa1812dc31e0b3b939b9cfdd37d0be2a4611ce5d4b876256834d6491d7bd4326e1e1ff50425b3d01a5a459fbcd3491965fc08d69dbe2691fb5e2b9c4a26517d3a2033115d4d348f618822a438d5a5003020c6bb3ee2f140308d6fd929ed2fecc3010be182d7b75"}, {0x68, 0x0, 0x3, "ac9b28d913ad6bd35b7817c71cbd0f3e59ca57275416d5ec42072b0e001b30ee85de86e6ad7a59c3c319db3191e4c282ad4fd1afb8b05d4fea9bc4b92c65066de8cebaff98f1baaa5bc50a6a884ec5e61e"}, {0x70, 0x1ff, 0x9, "d7ff355ff43e141c843f07de745de7e0ee141b2cf98f7cfcc65f38bc05fe7ca940a3ccb2b3f03ab1f3858743066453d5252c8d173727d2329922f36dac143d724b83e9f11b1672f65fa227447dc58998802dad2fccea588f80ee"}], 0x230}, 0x9b}, {{&(0x7f0000005ac0)=@sco={0x1f, {0x22b22f4000000000, 0x7f, 0x3, 0x7fffffff, 0x22b0, 0x506}}, 0x80, &(0x7f0000005c40)=[{&(0x7f0000005b40)="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", 0xfa}], 0x1, &(0x7f0000005c80)=[{0xb0, 0x116, 0xffff, "98350d8f1cd815895d8322d2a46f6aaca2bed6888dd3174cd4999f9f3d760c373c2ba1751f39eb84912fb45b6ce770e8ef384d34935c0a183d6e2ba0441b22b2e2f6d4553e37b017eb754436adab33522bb064034957cc583d1d5a88c3b04211ae3b8fcdfb66329ea9060d7f7210f77f9f367b5fba48253152a5060dee817a9119d997dc22c1c66c9a96babf213983d35f6128b97553598281"}, {0x110, 0x10a, 0x2, "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"}, {0x28, 0x11f, 0x7, "f20b6839a55efd244ccfa771fce867a823c62111"}], 0x1e8}, 0x9}, {{&(0x7f0000005e80)=@caif=@dgm={0x25, 0x1, 0x7fff}, 0x80, &(0x7f0000005f80)=[{&(0x7f0000005f00)="562087b0710a98351615f332c291f622b98a49ad75eb3633ec00b999db270cc5ed5d7fec65", 0x25}, {&(0x7f0000005f40)="6d7c4ea14f35d4ddd1803b1a8744d07b1410ef8e2a86bd6e13ae1ffdac0bc758bfe86fb74667582b36eeeff768", 0x2d}], 0x2, &(0x7f0000005fc0)=[{0x88, 0x11d, 0x1ff, "229085f221db29ae74e04f451ac9a319bd9d200ab97adedcaee011a78f6388ef612735c88e61d84159923448ac8a1e5acbbaf187c2fdf1d73f4cd3fd9803f3d9ed99ca221f71517d2518bdded89578052b1fa1187a0c6f1004fac5f9f46439b8ea524f2183adec2ff28088f291186c5636be24"}, {0x1010, 0x0, 0x3, "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"}, {0x30, 0x113, 0x9, "29da3cf6293d99da4c56e953743b8cebe161273db6e0f2af68d06e962be1aa"}, {0xf0, 0x113, 0xfff, "6108e4525eacf6fb1ccf675e224da39a12bbb5f42a877753998fb8c60d5cbe20440f8d849f6d92b1c7d9628ecd31f8ff69816e688f4ae9afaa90de62e412c0c67ecd335ea36ff3e1bea5a1b44db782fd385e831ef92e8378b9051e55b42857c73b0f15e7770ba7b0cbf084e8532835b5361cd2fd9a3f70ba66f75091f51221699f609b7f1dbcac53fd36a24b5ce89ae732175253de1b452559d6864f939136154260b76342ee2bdcd775cbdf4559ad3b8e006b2767b7eb7a190210ea9382d11bb0ad65995d55f4caa4448698980d50a5455cddce04f47328f49ba6"}, {0xc8, 0x110, 0x5, "4bc9bddb596d626f902b37f64f3cd900554dcf4f9c97c46ceff20f432b62d6a36b0a457f37f508d2da6e52545a9ac09318ee369e01b9ceeb59cb66667a62a468f486257b17963d5efcbbdbe364e08864f3441f6db28d5597b0e4f396ebe23f2a738eb61a0ca4c42f7eba83126f20e55dea6c2dc24beec2a9a1d1c38de704cadf742af2902442702dbf7bda970e5fa22c5e1b68bc27039419e5a41cb5566f8a235bd3b797e6173e7c8cf506d7c654b174eb"}, {0x100, 0x1ff, 0x6ea, "eebcd07f7e357c28243024a4100bedb2582c94e99e2d9b33ce86cba2f60179db844a4902b49b3a6e2ef77a4ec48ee09c7f9d8e28352e33110432ddcbf253c94cce4b140e334d9bb2e518dc6c10cfc85456f911394ea605da8368dfbc0413cc1722f1164eb10e538b6369a4cd22b6ae3570fe98fb40d2c3e9b77e152893077d54a9a7cbbccd66475a31e4068784523b9a881e61617141d4d6384811c437d91c1450d5a646ab696d474718b4612d16c4e92aedd5729edd0ea2189c96e51b5472440ae1684991b34de5f7446cd6499df9f566eb7d8b1fdc087d897e9b1fa79ce4429af1cc2f958a92614bdea48536c5d8"}, {0x60, 0x111, 0x1000, "bb85a4f9b354e3df1cd1006f9a7f1b22f84caba4bc291d71348a859c8a30517cf760b325f365be00dc60da2316ef5b033b02bfc8ff141af505b0fa042c30804f6119af5f0dfe592bf08c5fd87a"}, {0x1010, 0x109, 0xd4, "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"}, {0x18, 0x10f, 0x4, "a8b95b"}], 0x2408}, 0x3ff}, {{&(0x7f0000008400)=@rc={0x1f, {0x9, 0x40, 0x5052, 0x4d, 0xf86, 0x8}, 0x7000000000000}, 0x80, &(0x7f0000008840)=[{&(0x7f0000008480)="6b14d452aa42c5f2fd18e4bf8c37ea1ccd2daf44261767d8029c16f40c33b8a9d4c0f1d63bc23e186a7641ab7ede157797f4225388aa6bb79da7bf2e", 0x3c}, {&(0x7f00000084c0)="f2139fea2fb20584812b1b1eea45c668ed6dff1768bb8779123cd24c426d64fa67f476d3578a9c44663e26a6071e540c0a210331cac8ff090d93f90a372c7cd952a7fcdb9c7cb8ecc8464e6f39c071d5b1a38a9425542249d4acd00ec13125dd29eab6bb7d63339255545a9ef98e06951cabf9d153c6de84d44b88d380a7750a8805af3ba1e778c7fe90cbd9bf720fe2ade4630bf78e07d05eea22de814f1d02f077a9aeaa497fe900b1ae8ba11ca25162a983df04", 0xb5}, {&(0x7f0000008580)="96bec195cfefec6d778625064bdad2d55b176b7f580342bf06f36d4200b5e5e04779d653904182314922714ac93bd2bb37263a5ec0ce20c2afd494746c2f0809e64429d1685145afd6c266c21d87d038910e2a", 0x53}, {&(0x7f0000008600)="612025e55678370819de812b5e353c594284103dae59", 0x16}, {&(0x7f0000008640)="7c0ef548248b8790593c36b82a714c06599f9f3d74bd0a35ee5c073eece42d95d3bb22fc4541d67b68ad37a5cc15b3625d3a01a211cd0567186cecab2f5a7d41092fd8d2abc76e55aa1101d4152950778e4f47bac67ae638e508ab8cc71bfc6c22ff748923729598882fa281af83ed63172496ee5a7e113efc0c89b7134423841ee90fe7560a870c578a5117614c5feaecfbee83e0529e500a4c0386b015f2e6087d04ede42efbd33683cbee9bd030a5fca15b3da1819a44d91d4954983f035d9f3b25819d39fecf0f57c1e1143e47c680d25f94203fcd8e75de923d7d135f", 0xdf}, {&(0x7f0000008740)="5a30c6df609da88fd30189c3985bbe948506b4f6e8b69d8b3abaa8227acd0bdb9a101ec273445e523eecf37fe8d0b77fab0c3c31be403a2dfd278e66348b1ec315e1e9f29c1fac86502992758f984d7163e22b68ec8c6e7b4d22d57f1b38e48855208c57946d54856b0314ebe2f75345012515182b69bc9f87d42b9fc694decc76edc2e4cef342060bdc578f1a067ab5f97ec050ee6eeb302b7d1e2b3cda2c5d7306281aefe6f0a0961ddd68676d58cbba1ea88730653541400d94c47ff24041558c7d6e59336cb545d4da77f376bb5405", 0xd1}], 0x6, &(0x7f00000088c0)=[{0x60, 0x3a, 0x5, "f8a38c6c34fd14917cf1be80554c2646d4bc8a5d0302ec5601c08700708c5ebe30c63280ea353ce21ef11f617142858cb2c37492f000b5cbce142eb4d94d63956eb6d6ff045fb739a7"}, {0xc8, 0x101, 0x81, "eda05f45a58d81c388b52e51a307deb909cc0a5181f00fc17193bd6e3d7163ede74a3b384bf66fec13471946c72a5b9cbc3241c90cb153d2c55ade98faba10e68b5ce69a187e9134c4d47dcb5f06498d26b19ca985a5f257b24678a51f347d0aeaaacc1abd4f4a45f8c18425eec29db13fc096cc561c22d5f893d18e99142dff84d32d810852dc4bc6785ba9709c319d65e517dddb7637155637e53b0e4187fb1c0764a73f3c18420cf0d6e415762fdd284a"}], 0x128}, 0x3ab}], 0x9, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000008c40)={0x0, @rand_addr, @initdev}, &(0x7f0000008c80)=0xc) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000008d00)={0x4, 0x102, 0x7, {0x4, 0x0, 0x2, 0x100}}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000008cc0), &(0x7f0000008d80)=0x4) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000008dc0)=""/224) 06:51:04 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) r2 = syz_open_dev$cec(&(0x7f0000000400)='/dev/cec#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000600)={0x0, 0x5e, "7b0fb916a15a62ceabf15692f0045c838ff174851cfb8516b6ae3ecd6e4cc9d6ec4a45bcb99740506d200f332c43d742c6d90c89c0c75646ad6d82b2759c69eedc283b4df332368dc0bff44bb5cfbded5387cc030d8fe60119e65d037fb8"}, &(0x7f0000000680)=0x66) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000006c0)={r3, 0x65, "5e41b5a63b824e89b458c84e5e2fec19ebc918582a6b00af59173605faebbdc41e93139b5964aec2e4fbfee731399c0d1a4c697e2e322dd1535ba575d122294ff04e00b12b48e09037566f9a357601c03d18aad2fa1925d0cb187ba79ab3ec2b472df7f99d"}, &(0x7f0000000740)=0x6d) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x8040, 0x0) r5 = getuid() bind(r4, &(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0xb3, @remote, 0x281}}}, 0x80) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x4, 0x3, &(0x7f00000002c0)=[{&(0x7f00000001c0)="8dad483a7a51f4739088a79b61e26bc76f150d12f5b39f003d029a358d5bf345148b650156d955f2232ff9116d9cdde3b6294f0c635977df5b6b511c05f84733c7b3fdb8783fca4112540a41321ef7a05bc1c00d4782984bcc531dfe0f77422d213329de832d88872299f56eb6e97431daac1b898f04b0f0c2198dabafcea43a276373260982d304b6b0226d07219c2644bef05aa0d169952b3ac91b1218d1f8f7feb9eaf138", 0xa6, 0x8}, {&(0x7f0000000280)="7e7a68d16dbf3210db59fe2db2b73c8aeb231daa", 0x14, 0xe3f3}, {&(0x7f0000000480)="7b065aececd125d5fdcdb8d13991aecd462225df48ddad1d044ed3e8e2659f544e9a0a4ef0594b1816a9e95949485167ba08ecd9cacae94388c7962265730ccf9f610022d4e30e2aefc46ef49250bd2d9aaf8191a2e16bd419939d2118227510dce3346bc2c3d990f459623b40018447f5c78501a24a851c225633c025360efff346bc97737f1dee5bf990878b91e1f4d6fe6af67badd2a2a7ac307f183f0f0dfa9614b0e8f1dc5d38ce9bc551a462200f6fd1a3b4012c8d8a3a8af2b162b32fd3f09daa43fc2efcb80c775f4e861c40384bbe2a080a10a7d3b5e206fa38f583a9", 0xe1, 0x841a}], 0x1000000, &(0x7f0000000380)={[{@norock='norock'}, {@unhide='unhide'}, {@nojoliet='nojoliet'}, {@unhide='unhide'}, {@cruft='cruft'}, {@map_off='map=off'}, {@map_normal='map=normal'}, {@norock='norock'}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', r5}}]}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0x8, 0x4) 06:51:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x9}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000c00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/91, 0x5b}], 0x1, 0x0) [ 2222.406920][T15527] sg_write: data in/out 327644/46 bytes for SCSI command 0x2-- guessing data in; [ 2222.406920][T15527] program syz-executor.0 not setting count and/or reply_len properly 06:51:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x400000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x3}, [{}]}, 0x58) [ 2222.458924][T15528] device nr0 entered promiscuous mode 06:51:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2222.566039][T15701] sg_write: data in/out 327644/46 bytes for SCSI command 0x3-- guessing data in; [ 2222.566039][T15701] program syz-executor.0 not setting count and/or reply_len properly 06:51:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x500000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:04 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000001c0)=0x20010001, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={r1, 0x80000, r0}) getpeername$tipc(r0, &(0x7f0000000100), &(0x7f0000000200)=0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r3, 0x0, 0x0, 0x1}}, 0x20) 06:51:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x4}, [{}]}, 0x58) [ 2222.642359][T15583] XFS (loop2): Invalid superblock magic number [ 2222.800185][T15760] sg_write: data in/out 327644/46 bytes for SCSI command 0x4-- guessing data in; [ 2222.800185][T15760] program syz-executor.0 not setting count and/or reply_len properly 06:51:05 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x64020000, 0x0, 0x0, 0x0, 0x0) 06:51:05 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpgrp(0xffffffffffffffff) ptrace$setregs(0xf, r3, 0xbc9, &(0x7f00000001c0)="043077ea1a3b3fee2feecc1f32253cde88ec824234d09507faa3afc980897aab27e935a0cf03c200e53e85e6add2f376ac1f7c4612b51776edd1465b32b802937832f43e083c7ca1efdcfcbfef36852dbc04f651a8172cb88ae7c0f48ec411a5af9aa1bd93699279ec0f8fa2bed96c4e2bdb5bb4c108ecc2b4f79067c9d9f12fc1298842c1649375b87a2e4434569460556197bb22d4aaf1ccf37315aea486b87527cf32a92f1692e23630b3bbf1b31947cefce1b11e70b9d48ea42f9f8a10a9c48308f6a972767f1867c381b4dd7db9584642c5084f2896268cd2b053") sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x29}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_AF={0x8}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:51:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x600000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x5}, [{}]}, 0x58) 06:51:05 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r0, 0x0, 0x0, 0x1}}, 0x20) r1 = getgid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8) mount$9p_xen(&(0x7f00000000c0)='*eth1\\\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x4, &(0x7f0000000300)={'trans=xen,', {[{@dfltgid={'dfltgid', 0x3d, r1}}, {@cache_loose='cache=loose'}, {@noextend='noextend'}, {@debug={'debug', 0x3d, 0x3}}, {@version_9p2000='version=9p2000'}, {@msize={'msize', 0x3d, 0x7ff}}, {@afid={'afid', 0x3d, 0xbfbe}}], [{@uid_gt={'uid>', r2}}]}}) r3 = syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x2) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000004c0), 0x4) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000440)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e20, @empty}, 0x4, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)='bcsf0\x00', 0x0, 0x3, 0x6}) 06:51:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x9}) socket$kcm(0x29, 0x2, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/91, 0x5b}], 0x1, 0x0) 06:51:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x700000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2223.538474][T15879] sg_write: data in/out 327644/46 bytes for SCSI command 0x5-- guessing data in; [ 2223.538474][T15879] program syz-executor.0 not setting count and/or reply_len properly 06:51:05 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x148, 0xfa00, {0x0, 0x0, 0x2, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:51:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x6}, [{}]}, 0x58) 06:51:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x800000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x900000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2223.692367][T15962] sg_write: data in/out 327644/46 bytes for SCSI command 0x6-- guessing data in; [ 2223.692367][T15962] program syz-executor.0 not setting count and/or reply_len properly [ 2223.710792][T15893] XFS (loop2): Invalid superblock magic number 06:51:05 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5a1a8c9, 0x200) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x2, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2223.755392][T15962] sg_write: data in/out 327644/46 bytes for SCSI command 0x6-- guessing data in; [ 2223.755392][T15962] program syz-executor.0 not setting count and/or reply_len properly [ 2224.225319][T15893] BUG: MAX_STACK_TRACE_ENTRIES too low! [ 2224.230874][T15893] turning off the locking correctness validator. [ 2224.237184][T15893] CPU: 0 PID: 15893 Comm: syz-executor.2 Not tainted 5.1.0-rc2+ #38 [ 2224.245140][T15893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2224.255179][T15893] Call Trace: [ 2224.258460][T15893] dump_stack+0x172/0x1f0 [ 2224.262796][T15893] save_trace.cold+0x14/0x19 [ 2224.267388][T15893] mark_lock+0x2fb/0x1380 [ 2224.271706][T15893] ? lock_downgrade+0x880/0x880 [ 2224.276558][T15893] ? print_shortest_lock_dependencies+0x90/0x90 [ 2224.282783][T15893] __lock_acquire+0x1317/0x3fb0 [ 2224.287628][T15893] ? is_bpf_text_address+0xd3/0x170 [ 2224.292815][T15893] ? mark_held_locks+0xf0/0xf0 [ 2224.297581][T15893] ? debug_smp_processor_id+0x3c/0x280 [ 2224.303023][T15893] ? perf_trace_lock+0xeb/0x510 [ 2224.307911][T15893] lock_acquire+0x16f/0x3f0 [ 2224.312401][T15893] ? flush_workqueue+0xf7/0x14c0 [ 2224.317330][T15893] flush_workqueue+0x126/0x14c0 [ 2224.322179][T15893] ? flush_workqueue+0xf7/0x14c0 [ 2224.327119][T15893] ? ksys_mount+0xdb/0x150 [ 2224.331536][T15893] ? lock_downgrade+0x880/0x880 [ 2224.336372][T15893] ? pwq_unbound_release_workfn+0x2f0/0x2f0 [ 2224.342256][T15893] ? wait_for_completion+0x440/0x440 [ 2224.347538][T15893] drain_workqueue+0x1b4/0x470 [ 2224.352288][T15893] ? drain_workqueue+0x1b4/0x470 [ 2224.357231][T15893] destroy_workqueue+0x21/0x700 [ 2224.362077][T15893] ? init_rescuer.part.0+0x125/0x190 [ 2224.367362][T15893] alloc_workqueue+0xcc4/0xf00 [ 2224.372124][T15893] ? up_write+0x1c/0x150 [ 2224.376360][T15893] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2224.382074][T15893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2224.388334][T15893] ? xfs_open_devices+0x14a/0x560 [ 2224.393350][T15893] xfs_init_mount_workqueues+0x27c/0x660 [ 2224.398967][T15893] ? sb_set_blocksize+0xe4/0x110 [ 2224.403893][T15893] xfs_fs_fill_super+0x749/0x1670 [ 2224.408905][T15893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2224.415131][T15893] mount_bdev+0x307/0x3c0 [ 2224.419452][T15893] ? xfs_test_remount_options+0x90/0x90 [ 2224.425005][T15893] xfs_fs_mount+0x35/0x40 [ 2224.429321][T15893] ? xfs_finish_flags+0x490/0x490 [ 2224.434337][T15893] legacy_get_tree+0xf2/0x200 [ 2224.439013][T15893] vfs_get_tree+0x123/0x450 [ 2224.443506][T15893] do_mount+0x1436/0x2c40 [ 2224.447827][T15893] ? copy_mount_string+0x40/0x40 [ 2224.452753][T15893] ? copy_mount_options+0x203/0x3a0 [ 2224.457937][T15893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2224.464183][T15893] ? copy_mount_options+0x280/0x3a0 [ 2224.469381][T15893] ksys_mount+0xdb/0x150 [ 2224.473622][T15893] __x64_sys_mount+0xbe/0x150 [ 2224.478302][T15893] do_syscall_64+0x103/0x610 [ 2224.482882][T15893] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2224.488762][T15893] RIP: 0033:0x45ac7a [ 2224.492654][T15893] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2d 8e fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0a 8e fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2224.512253][T15893] RSP: 002b:00007f41ac7f8a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2224.520648][T15893] RAX: ffffffffffffffda RBX: 00007f41ac7f8b40 RCX: 000000000045ac7a [ 2224.528603][T15893] RDX: 00007f41ac7f8ae0 RSI: 0000000020000080 RDI: 00007f41ac7f8b00 [ 2224.536568][T15893] RBP: 0000000000000000 R08: 00007f41ac7f8b40 R09: 00007f41ac7f8ae0 [ 2224.544552][T15893] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003 [ 2224.552535][T15893] R13: 00000000004c6b80 R14: 00000000004dc190 R15: 00000000ffffffff [ 2224.563969][T15876] kobject: 'rx-0' (000000003390ced8): kobject_cleanup, parent 0000000093738943 [ 2224.573104][T15876] kobject: 'rx-0' (000000003390ced8): auto cleanup 'remove' event [ 2224.581052][T15876] kobject: 'rx-0' (000000003390ced8): kobject_uevent_env [ 2224.588285][T15876] kobject: 'rx-0' (000000003390ced8): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' [ 2224.599323][T15876] kobject: 'rx-0' (000000003390ced8): auto cleanup kobject_del [ 2224.607177][T15876] kobject: 'rx-0' (000000003390ced8): calling ktype release [ 2224.614552][T15876] kobject: 'rx-0': free name [ 2224.619315][T15876] kobject: 'tx-0' (0000000007d90f51): kobject_cleanup, parent 0000000093738943 [ 2224.628484][T15876] kobject: 'tx-0' (0000000007d90f51): auto cleanup 'remove' event [ 2224.636390][T15876] kobject: 'tx-0' (0000000007d90f51): kobject_uevent_env [ 2224.643549][T15876] kobject: 'tx-0' (0000000007d90f51): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' [ 2224.655772][T15876] kobject: 'tx-0' (0000000007d90f51): auto cleanup kobject_del [ 2224.663428][T15876] kobject: 'tx-0' (0000000007d90f51): calling ktype release [ 2224.670824][T15876] kobject: 'tx-0': free name [ 2224.675532][T15876] kobject: 'queues' (0000000093738943): kobject_cleanup, parent (null) [ 2224.684792][T15876] kobject: 'queues' (0000000093738943): calling ktype release [ 2224.693089][T15876] kobject: 'queues' (0000000093738943): kset_release [ 2224.699908][T15876] kobject: 'queues': free name [ 2224.705146][T15876] kobject: 'nr0' (00000000423d3d91): kobject_uevent_env [ 2224.712349][T15876] kobject: 'nr0' (00000000423d3d91): fill_kobj_path: path = '/devices/virtual/net/nr0' [ 2224.765818][T15876] kobject: 'nr0' (00000000423d3d91): kobject_cleanup, parent (null) [ 2224.775395][T15876] kobject: 'nr0' (00000000423d3d91): calling ktype release [ 2224.787518][T15876] kobject: 'nr0': free name 06:51:06 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x68000000, 0x0, 0x0, 0x0, 0x0) 06:51:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x7}, [{}]}, 0x58) 06:51:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xa00000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:06 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x6d69, 0x440) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x7) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x5, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x1, 0x0, [0x5, 0x8, 0x3, 0x4195, 0xc543, 0x7fffffff, 0x4, 0x3ff, 0xcc1, 0x0, 0x8, 0x8, 0x4, 0x80, 0xffffffffffff870d, 0x800]}, {0x4, 0x0, [0xffff, 0x400000000, 0x4, 0xbc, 0x401, 0x5, 0xa2b, 0x7f, 0x0, 0xffffffffffff7fff, 0x5, 0x5, 0x8, 0x3fe00000, 0x1, 0x80000001]}, {0x8, 0x0, [0xcf7, 0x0, 0x1, 0x1, 0x2, 0x400, 0x7fffffff, 0x80000000, 0x401, 0x7, 0x1, 0x7171f82, 0x4, 0x0, 0x5, 0x6]}], r1}}, 0xffffffffffffff2e) r3 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x6, 0x408300) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000380)={{0xff, 0x1, 0x101, 0x3, 0x187, 0x7}, 0x80, 0x3, 0x10001, 0x0, 0x8, "1f94b17def2f2734627bee4da5469cc8010c8cb9cc49eb2ff8539e146f610dec190d46d824e014a231f18885c106b2c76dcb63058e1f7837d7f2a92c28d92ab31e4a1d15d8fba98aa8551cd5c0f5d2a083e2b3bfb39489d42bad01c5853c0c2d5c87dfa2f5d7d20d8cd3e4a6eae9888b7a383fc59610f403bbe974fab137ceff"}) 06:51:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/34) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000001c0)=""/109, &(0x7f0000000240)=0x6d) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x13f, 0xc}}, 0x20) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000180)={0x4, 0x5, 0x7, 0x0, "23889599c6fb30d7686093e87208dd060b314c67d6bcd47205bb6e72504e3fb2"}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), 0x4) write$apparmor_exec(r1, &(0x7f00000002c0)={'stack ', '/dev/infiniband/rdma_cm\x00'}, 0x1e) 06:51:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x9}) socket$kcm(0x29, 0x2, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/91, 0x5b}], 0x1, 0x0) [ 2224.848437][ T3875] kobject: 'loop5' (00000000f8c93bb9): kobject_uevent_env [ 2224.855630][ T3875] kobject: 'loop5' (00000000f8c93bb9): fill_kobj_path: path = '/devices/virtual/block/loop5' 06:51:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1400000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2224.896037][T16027] sg_write: data in/out 327644/46 bytes for SCSI command 0x7-- guessing data in; [ 2224.896037][T16027] program syz-executor.0 not setting count and/or reply_len properly [ 2224.913919][ T7641] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2224.922937][ T7641] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2224.934165][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env 06:51:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1f00000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x10}, [{}]}, 0x58) [ 2224.944510][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2224.961286][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2224.963417][T16035] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2224.973302][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2224.982377][T16035] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' 06:51:06 executing program 3: syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x10000, 0x200) r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x9, 0x80800) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x22000, 0x0) connect$llc(r2, &(0x7f00000000c0)={0x1a, 0x324, 0x5, 0xf3e, 0x7fff, 0x6, @remote}, 0x10) utime(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x1, 0x97}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0xaea2, 0x0) time(&(0x7f0000000200)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x10081, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000002c0)={0x7d, 0x0, [0x3, 0x9, 0x80000000000005, 0x8]}) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000340)={0x13, 0xfffffffffffffed3, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0xfd99) 06:51:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x48}, [{}]}, 0x58) [ 2225.018312][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2225.053931][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' 06:51:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2000000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2225.071954][ T3875] kobject: 'loop0' (000000007038bad8): kobject_uevent_env [ 2225.080051][ T3875] kobject: 'loop0' (000000007038bad8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2225.096092][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2225.115570][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2225.131287][ T3875] kobject: 'loop0' (000000007038bad8): kobject_uevent_env [ 2225.141120][ T3875] kobject: 'loop0' (000000007038bad8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2225.145941][T16035] XFS (loop2): Invalid superblock magic number [ 2225.152420][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2225.164613][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2225.175277][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2225.182653][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2225.193207][ T3875] kobject: 'loop5' (00000000f8c93bb9): kobject_uevent_env [ 2225.200384][ T3875] kobject: 'loop5' (00000000f8c93bb9): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2225.210810][ T3875] kobject: 'loop4' (000000002db3cce5): kobject_uevent_env [ 2225.218368][ T3875] kobject: 'loop4' (000000002db3cce5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2225.228880][ T3875] kobject: 'loop0' (000000007038bad8): kobject_uevent_env [ 2225.236108][ T3875] kobject: 'loop0' (000000007038bad8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2225.246557][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2225.253659][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2225.575858][T16035] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2225.583007][T16035] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2225.594149][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2225.596884][T16035] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2225.601535][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2225.611623][T16035] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2225.642398][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2225.649622][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' 06:51:07 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x0, 0x0, 0x0, 0x0) 06:51:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8881, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000080)={0x3, 0x0, @pic={0xfc7, 0x7, 0x3, 0x7, 0x6, 0x8, 0x7f, 0x7, 0x20, 0xffffffffffffffc1, 0x32347e42, 0x10000, 0x73e, 0x33, 0x9}}) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:51:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x9}) socket$kcm(0x29, 0x2, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/91, 0x5b}], 0x1, 0x0) 06:51:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x40, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000100)={0x40}, 0x4) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) 06:51:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x4c}, [{}]}, 0x58) 06:51:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2010000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x220f000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x60}, [{}]}, 0x58) [ 2225.854806][T16288] kobject: 'nr0' (00000000ceaae824): kobject_add_internal: parent: 'net', set: 'devices' [ 2225.868729][ T7641] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2225.877304][ T7641] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2225.891665][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env 06:51:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2300000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2225.899137][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2225.907857][T16288] kobject: 'nr0' (00000000ceaae824): kobject_uevent_env [ 2225.940659][T16288] kobject: 'nr0' (00000000ceaae824): fill_kobj_path: path = '/devices/virtual/net/nr0' 06:51:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:51:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x68}, [{}]}, 0x58) [ 2225.948248][ T3875] kobject: 'loop0' (000000007038bad8): kobject_uevent_env [ 2225.953462][T16357] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2225.958896][ T3875] kobject: 'loop0' (000000007038bad8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2225.972891][T16357] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2225.976789][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2225.992307][T16288] kobject: 'queues' (00000000c8d1c428): kobject_add_internal: parent: 'nr0', set: '' 06:51:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2804000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2225.992565][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2226.028995][T16288] kobject: 'queues' (00000000c8d1c428): kobject_uevent_env [ 2226.040654][T16288] kobject: 'queues' (00000000c8d1c428): kobject_uevent_env: filter function caused the event to drop! [ 2226.059059][T16288] kobject: 'rx-0' (000000001d098f5b): kobject_add_internal: parent: 'queues', set: 'queues' [ 2226.063664][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2226.076412][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2226.087223][ T3875] kobject: 'loop0' (000000007038bad8): kobject_uevent_env [ 2226.088752][T16288] kobject: 'rx-0' (000000001d098f5b): kobject_uevent_env [ 2226.094510][ T3875] kobject: 'loop0' (000000007038bad8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2226.119027][T16288] kobject: 'rx-0' (000000001d098f5b): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' [ 2226.122640][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2226.135103][T16288] kobject: 'tx-0' (0000000002d83a5b): kobject_add_internal: parent: 'queues', set: 'queues' [ 2226.137448][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2226.137783][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2226.151385][T16288] kobject: 'tx-0' (0000000002d83a5b): kobject_uevent_env [ 2226.157813][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2226.158155][ T3875] kobject: 'loop4' (000000002db3cce5): kobject_uevent_env [ 2226.165992][T16357] XFS (loop2): Invalid superblock magic number [ 2226.172093][ T3875] kobject: 'loop4' (000000002db3cce5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2226.185290][T16288] kobject: 'tx-0' (0000000002d83a5b): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' [ 2226.189718][ T3875] kobject: 'loop0' (000000007038bad8): kobject_uevent_env [ 2226.223679][ T3875] kobject: 'loop0' (000000007038bad8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2226.234231][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2226.241436][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2226.251983][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2226.259151][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2226.259192][T16279] kobject: 'rx-0' (000000001d098f5b): kobject_cleanup, parent 00000000c8d1c428 [ 2226.283950][T16279] kobject: 'rx-0' (000000001d098f5b): auto cleanup 'remove' event [ 2226.292166][T16279] kobject: 'rx-0' (000000001d098f5b): kobject_uevent_env [ 2226.303303][T16279] kobject: 'rx-0' (000000001d098f5b): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' [ 2226.314559][T16279] kobject: 'rx-0' (000000001d098f5b): auto cleanup kobject_del [ 2226.325292][T16279] kobject: 'rx-0' (000000001d098f5b): calling ktype release [ 2226.333008][T16279] kobject: 'rx-0': free name [ 2226.340920][T16279] kobject: 'tx-0' (0000000002d83a5b): kobject_cleanup, parent 00000000c8d1c428 [ 2226.350141][T16279] kobject: 'tx-0' (0000000002d83a5b): auto cleanup 'remove' event [ 2226.361199][T16279] kobject: 'tx-0' (0000000002d83a5b): kobject_uevent_env [ 2226.368643][T16279] kobject: 'tx-0' (0000000002d83a5b): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' [ 2226.382932][T16279] kobject: 'tx-0' (0000000002d83a5b): auto cleanup kobject_del [ 2226.390826][T16279] kobject: 'tx-0' (0000000002d83a5b): calling ktype release [ 2226.401327][T16279] kobject: 'tx-0': free name [ 2226.406800][T16279] kobject: 'queues' (00000000c8d1c428): kobject_cleanup, parent (null) [ 2226.419139][T16279] kobject: 'queues' (00000000c8d1c428): calling ktype release [ 2226.426890][T16279] kobject: 'queues' (00000000c8d1c428): kset_release [ 2226.433660][T16279] kobject: 'queues': free name [ 2226.442499][T16279] kobject: 'nr0' (00000000ceaae824): kobject_uevent_env [ 2226.449906][T16279] kobject: 'nr0' (00000000ceaae824): fill_kobj_path: path = '/devices/virtual/net/nr0' [ 2226.505954][T16279] kobject: 'nr0' (00000000ceaae824): kobject_cleanup, parent (null) [ 2226.514996][T16279] kobject: 'nr0' (00000000ceaae824): calling ktype release [ 2226.525881][T16279] kobject: 'nr0': free name [ 2226.533793][ T3875] kobject: 'loop5' (00000000f8c93bb9): kobject_uevent_env [ 2226.541021][ T3875] kobject: 'loop5' (00000000f8c93bb9): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2226.636017][T16357] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2226.643224][T16357] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2226.657436][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2226.663507][T16357] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2226.664550][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2226.688631][T16357] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2226.709797][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2226.716943][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' 06:51:08 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x74000000, 0x0, 0x0, 0x0, 0x0) 06:51:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000080)=""/248) 06:51:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x6c}, [{}]}, 0x58) 06:51:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2904000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x228082, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x4) 06:51:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x9}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000c00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/91, 0x5b}], 0x1, 0x0) [ 2226.904116][T16531] sg_write: 7 callbacks suppressed [ 2226.904128][T16531] sg_write: data in/out 327644/40 bytes for SCSI command 0x6c-- guessing data in; [ 2226.904128][T16531] program syz-executor.0 not setting count and/or reply_len properly [ 2226.916482][T16529] kobject: 'nr0' (000000006bf4446d): kobject_add_internal: parent: 'net', set: 'devices' [ 2226.933762][T16531] sg_write: data in/out 327644/40 bytes for SCSI command 0x6c-- guessing data in; [ 2226.933762][T16531] program syz-executor.0 not setting count and/or reply_len properly 06:51:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2a04000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2226.960321][T16529] kobject: 'nr0' (000000006bf4446d): kobject_uevent_env [ 2226.966108][ T7641] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2226.975200][ T7641] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2226.979646][T16529] kobject: 'nr0' (000000006bf4446d): fill_kobj_path: path = '/devices/virtual/net/nr0' 06:51:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x74}, [{}]}, 0x58) 06:51:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b80)='memory.events\x00', 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x1f, &(0x7f0000001bc0)=0x25, 0x4) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001a80)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x8, &(0x7f00000019c0)=[{&(0x7f00000000c0)="dedf219bbf32dc9aa362f548d084cee7ac597f1784ad034aee8ea469f20fdfc3c503c0615fc61f244c8dc1a93c35a1cb7a4f3aba463f6f79f6ecfb4f74445125f60f8d6604c0af85febc1a967b33a239f98e9e26eaab243f8b9e97e794369611b15ad7e55987e64c27e216bb648776fb0efb90c1a1e61fde94bb146f3a0be4f90ba89c8bde3c0a79c6da5018954533978ff19d12c8e45cc22e3f2219c7991a2cb678c27e626d289e7b4a238e112ce802e2a4b03b4b3f6135c958622bb09daa191c78011354ba23e9c69798e223b5bd4127e27ed85c1eaa305b8736", 0xdb, 0x8001}, {&(0x7f00000001c0)="4f59b2810230a62636833147124cb02728a2ee51ff60c4dd942d174dbf7dcd0969c0f341b40101e328cf0e9f796eb8f5ed720c8edb57f013235487813add4a4fe69abcdd6f0a9c70242c48f4a8c88685d127935cb4ab952d7649b22bfdee4893cb890de7253e2a41b874933eb2c503946452262f7ce84fae672824f7b988586d0812111d492e9676eeef9b06e9a1b1c1fe72a228a6fa6277ea2a4658c478f3907e803b7c2d1ced9d3e66aced8f0401b493d99f60dbe85e546d3a72ac5e641cab17effbc4a596bbb5a295d0d6", 0xcc, 0x1000}, {&(0x7f00000005c0)="9fa40ef8efc3b8875a7cefa260065fe9399875362a42dcd3d01096ba1f78c104846862bb6329575ed9b4eb564d8e3144f3774278a7d802ce5e96761a556afc006a28468ddc832244b8337d444419b437043adce10e2a9fedb84680adf9c3570c3a92b13b91d3ade4073475c6a79511f9709f66cb43d1ab3d330ea46790a66e1bfd77efe287b3133fb8f609c69e6d3a1975640f549be5ab594985c07aaf479f90785be1833a50721dd360c3c640edca9272302033", 0xb4, 0xfffffffffffffe01}, {&(0x7f00000002c0)="ffaced988985ceb3600aaa0310881e96efb568a39ead8bf5c0a8fe323acfeefa3268296b62e1908ca3fd1c6b0674435e9e1cf57eda8710736c3afc8a07563b2f87633c7d50eb38a682316c9655ea61364bc3ca5a09966febd1b4171c", 0x5c, 0x9}, {&(0x7f0000000680)="a9d3811a244d84705ceed3c5993f9b559dfea7effbb848fbec7dd0b310bd70660c3fdc93d48e7b90ddf9e443f3e64624f9397275df65c6f4f37ebda679e20c992feb7a8c274718efcc9a3ad0e289eea41cb566f9d2fa9063df919471d8f19830190c02c088eae446ff5dfd1912a99ec223ad7213cec560f0e01fabb4f06c9bdd52f83d6ce9a5292752ef816df0fba1915b83b091d9cae1d6c94d35d3cec82182865474bab74aae9b878678d7e9cc09485ebcb5cdc25b289030d4381b7a4b9b4b951ae85fb6f2aff091fdc3ddd61f71936a23d775ce3e6800b1cf589b72db876ca3e602ac072cf4936a9219675978b5f9b36c40863f9023e32e95c88d89dc", 0xfe, 0x7}, {&(0x7f0000000780)="af4aa7a89a9f113e6cb7089be7392d07b3528524efc873257527faaa0a391a9b591c64a6036dcc78b5542c1baed4ad69693f78f358e20723a785eb32f229362e66bf43e495dec306631ca50f6515bc68fb18288687bab292e70e5706d819905030d4444f36df22a21ce4107392b4dbc357497bbc1ab368151213c608b18af635137d936d2463c4682870d5ba3306680bd75e6fa700e944c5fd3633439714833ebed1164b90f4cae4c739c1e951984665f47dbc3fee161f4505c98138404368e101141f9af672a5", 0xc7, 0x3}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000000880)="d0955149a572bc258938a3e30e895b2453e927ac3baf8023f68448bc00e8c955fb8ba1b372b05f37136d41cc33ad8ccdec670544eaa9bc54294257126eed40708e84a18f400fe9ef33469ceae5c39885da6b543d3ae4b47780a9e57306905e", 0x5f, 0x2}], 0x80000, &(0x7f0000000900)={[{@user_subvol_rm='user_subvol_rm_allowed'}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x75c}}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/infiniband/rdma_cm\x00'}}, {@fowner_gt={'fowner>', r2}}]}) [ 2227.018778][T16529] kobject: 'queues' (00000000e1355769): kobject_add_internal: parent: 'nr0', set: '' [ 2227.029326][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2227.039834][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2227.056123][T16529] kobject: 'queues' (00000000e1355769): kobject_uevent_env 06:51:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2c04000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2227.066219][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2227.078582][T16529] kobject: 'queues' (00000000e1355769): kobject_uevent_env: filter function caused the event to drop! [ 2227.089676][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2227.100109][T16529] kobject: 'rx-0' (0000000070a3f04a): kobject_add_internal: parent: 'queues', set: 'queues' [ 2227.100372][T16643] kobject: 'loop2' (00000000ee456106): kobject_uevent_env 06:51:09 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/200, &(0x7f00000001c0)=0xc8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r2, 0x0, 0x0, 0x1}}, 0x20) [ 2227.110710][ T3875] kobject: 'loop0' (000000007038bad8): kobject_uevent_env [ 2227.122038][T16648] sg_write: data in/out 327644/40 bytes for SCSI command 0x74-- guessing data in; [ 2227.122038][T16648] program syz-executor.0 not setting count and/or reply_len properly [ 2227.127231][T16529] kobject: 'rx-0' (0000000070a3f04a): kobject_uevent_env [ 2227.149496][ T3875] kobject: 'loop0' (000000007038bad8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2227.160867][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env 06:51:09 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2d04000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2227.169966][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2227.176647][T16643] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2227.180554][T16529] kobject: 'rx-0' (0000000070a3f04a): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' [ 2227.199074][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2227.218118][T16660] IPVS: length: 200 != 24 [ 2227.222590][T16652] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2227.233459][T16652] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2227.244345][T16529] kobject: 'tx-0' (00000000d63220c6): kobject_add_internal: parent: 'queues', set: 'queues' [ 2227.245668][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2227.255043][T16529] kobject: 'tx-0' (00000000d63220c6): kobject_uevent_env [ 2227.268974][T16660] IPVS: length: 200 != 24 [ 2227.273163][T16529] kobject: 'tx-0' (00000000d63220c6): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' [ 2227.280534][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2227.294613][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2227.296031][T16652] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2227.308275][ T3875] kobject: 'loop4' (000000002db3cce5): kobject_uevent_env [ 2227.322651][T16643] XFS (loop2): Invalid superblock magic number [ 2227.323733][T16652] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2227.328922][ T3875] kobject: 'loop4' (000000002db3cce5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2227.352712][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2227.365431][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2227.376443][ T3875] kobject: 'loop0' (000000007038bad8): kobject_uevent_env [ 2227.383647][ T3875] kobject: 'loop0' (000000007038bad8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2227.395278][T16527] kobject: 'rx-0' (0000000070a3f04a): kobject_cleanup, parent 00000000e1355769 [ 2227.404597][T16527] kobject: 'rx-0' (0000000070a3f04a): auto cleanup 'remove' event [ 2227.405076][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2227.413989][T16527] kobject: 'rx-0' (0000000070a3f04a): kobject_uevent_env [ 2227.425880][T16863] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2227.427465][T16527] kobject: 'rx-0' (0000000070a3f04a): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' [ 2227.434247][T16863] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2227.444917][T16527] kobject: 'rx-0' (0000000070a3f04a): auto cleanup kobject_del [ 2227.444942][T16527] kobject: 'rx-0' (0000000070a3f04a): calling ktype release [ 2227.444953][T16527] kobject: 'rx-0': free name [ 2227.459506][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2227.463606][T16527] kobject: 'tx-0' (00000000d63220c6): kobject_cleanup, parent 00000000e1355769 [ 2227.480125][ T3875] kobject: 'loop4' (000000002db3cce5): kobject_uevent_env [ 2227.485199][T16527] kobject: 'tx-0' (00000000d63220c6): auto cleanup 'remove' event [ 2227.498318][ T3875] kobject: 'loop4' (000000002db3cce5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2227.501161][T16527] kobject: 'tx-0' (00000000d63220c6): kobject_uevent_env [ 2227.526343][T16527] kobject: 'tx-0' (00000000d63220c6): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' [ 2227.537346][T16527] kobject: 'tx-0' (00000000d63220c6): auto cleanup kobject_del [ 2227.539230][T16863] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2227.544936][T16527] kobject: 'tx-0' (00000000d63220c6): calling ktype release [ 2227.559469][T16527] kobject: 'tx-0': free name [ 2227.561080][T16863] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2227.564071][T16527] kobject: 'queues' (00000000e1355769): kobject_cleanup, parent (null) [ 2227.564078][T16527] kobject: 'queues' (00000000e1355769): calling ktype release [ 2227.564084][T16527] kobject: 'queues' (00000000e1355769): kset_release [ 2227.564096][T16527] kobject: 'queues': free name [ 2227.593245][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2227.598320][T16527] kobject: 'nr0' (000000006bf4446d): kobject_uevent_env [ 2227.612319][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2227.616856][T16527] kobject: 'nr0' (000000006bf4446d): fill_kobj_path: path = '/devices/virtual/net/nr0' [ 2227.638516][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2227.646027][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2227.676152][T16527] kobject: 'nr0' (000000006bf4446d): kobject_cleanup, parent (null) [ 2227.685078][T16527] kobject: 'nr0' (000000006bf4446d): calling ktype release [ 2227.692434][T16527] kobject: 'nr0': free name [ 2227.704275][ T3875] kobject: 'loop5' (00000000f8c93bb9): kobject_uevent_env [ 2227.711450][ T3875] kobject: 'loop5' (00000000f8c93bb9): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2227.835880][T16643] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2227.843105][T16643] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2227.857440][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2227.860570][T16643] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2227.864569][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2227.885102][T16643] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2227.905983][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2227.913128][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' 06:51:09 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x74010000, 0x0, 0x0, 0x0, 0x0) 06:51:09 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2e04000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x7a}, [{}]}, 0x58) 06:51:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r1, 0x3c, 0x0, @in6={0xa, 0x4e20, 0x1, @local, 0x8}}}, 0x90) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xffffffffffffff01, 0x76a5c2cb118971a9) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x80, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), r1}}, 0xb) 06:51:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) close(r0) 06:51:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x9}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000c00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/91, 0x5b}], 0x1, 0x0) 06:51:09 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2f04000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2228.089287][T16878] sg_write: data in/out 327644/40 bytes for SCSI command 0x7a-- guessing data in; [ 2228.089287][T16878] program syz-executor.0 not setting count and/or reply_len properly [ 2228.109973][T16872] kobject: 'nr0' (00000000f814598c): kobject_add_internal: parent: 'net', set: 'devices' [ 2228.120869][T16872] kobject: 'nr0' (00000000f814598c): kobject_uevent_env [ 2228.126830][ T7641] kobject: 'loop2' (00000000ee456106): kobject_uevent_env 06:51:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x300}, [{}]}, 0x58) [ 2228.128608][T16872] kobject: 'nr0' (00000000f814598c): fill_kobj_path: path = '/devices/virtual/net/nr0' [ 2228.135539][ T7641] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2228.153044][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2228.157358][T16872] kobject: 'queues' (00000000859f6727): kobject_add_internal: parent: 'nr0', set: '' 06:51:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3004000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2228.200962][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2228.204601][T16872] kobject: 'queues' (00000000859f6727): kobject_uevent_env [ 2228.215872][T16938] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2228.226452][T16872] kobject: 'queues' (00000000859f6727): kobject_uevent_env: filter function caused the event to drop! [ 2228.235474][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env 06:51:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x0, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) [ 2228.238467][T16938] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2228.245653][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2228.255513][T16965] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2228.255513][T16965] program syz-executor.0 not setting count and/or reply_len properly [ 2228.271775][ T3875] kobject: 'loop0' (000000007038bad8): kobject_uevent_env [ 2228.283402][T16872] kobject: 'rx-0' (000000001d5a00d8): kobject_add_internal: parent: 'queues', set: 'queues' [ 2228.293388][ T3875] kobject: 'loop0' (000000007038bad8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2228.328827][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2228.329979][T16872] kobject: 'rx-0' (000000001d5a00d8): kobject_uevent_env 06:51:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffd, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f00000000c0)=""/113) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x2, 0x80080) 06:51:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3104000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2228.341232][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2228.348027][T16872] kobject: 'rx-0' (000000001d5a00d8): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' [ 2228.359172][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2228.368293][T16872] kobject: 'tx-0' (000000006a8f66d6): kobject_add_internal: parent: 'queues', set: 'queues' [ 2228.399177][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2228.411841][T16872] kobject: 'tx-0' (000000006a8f66d6): kobject_uevent_env [ 2228.417486][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2228.425343][T16872] kobject: 'tx-0' (000000006a8f66d6): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' [ 2228.432222][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2228.451507][ T3875] kobject: 'loop4' (000000002db3cce5): kobject_uevent_env [ 2228.458819][ T3875] kobject: 'loop4' (000000002db3cce5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2228.472558][T16938] XFS (loop2): Invalid superblock magic number [ 2228.479163][ T3875] kobject: 'loop0' (000000007038bad8): kobject_uevent_env [ 2228.489029][ T3875] kobject: 'loop0' (000000007038bad8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2228.499558][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2228.509766][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2228.520424][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2228.527714][T16871] kobject: 'rx-0' (000000001d5a00d8): kobject_cleanup, parent 00000000859f6727 [ 2228.530506][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2228.537144][T16871] kobject: 'rx-0' (000000001d5a00d8): auto cleanup 'remove' event [ 2228.558965][ T3875] kobject: 'loop4' (000000002db3cce5): kobject_uevent_env [ 2228.559879][T16871] kobject: 'rx-0' (000000001d5a00d8): kobject_uevent_env [ 2228.566393][ T3875] kobject: 'loop4' (000000002db3cce5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2228.573709][T16871] kobject: 'rx-0' (000000001d5a00d8): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' [ 2228.595299][T16871] kobject: 'rx-0' (000000001d5a00d8): auto cleanup kobject_del [ 2228.603286][T16871] kobject: 'rx-0' (000000001d5a00d8): calling ktype release [ 2228.610868][T16871] kobject: 'rx-0': free name [ 2228.615553][T16871] kobject: 'tx-0' (000000006a8f66d6): kobject_cleanup, parent 00000000859f6727 [ 2228.625011][T16871] kobject: 'tx-0' (000000006a8f66d6): auto cleanup 'remove' event [ 2228.633181][T16871] kobject: 'tx-0' (000000006a8f66d6): kobject_uevent_env [ 2228.640556][T16871] kobject: 'tx-0' (000000006a8f66d6): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' [ 2228.651712][T16871] kobject: 'tx-0' (000000006a8f66d6): auto cleanup kobject_del [ 2228.659699][T16871] kobject: 'tx-0' (000000006a8f66d6): calling ktype release [ 2228.667291][T16871] kobject: 'tx-0': free name [ 2228.671964][T16871] kobject: 'queues' (00000000859f6727): kobject_cleanup, parent (null) [ 2228.682282][T16871] kobject: 'queues' (00000000859f6727): calling ktype release [ 2228.689991][T16871] kobject: 'queues' (00000000859f6727): kset_release [ 2228.697030][T16871] kobject: 'queues': free name [ 2228.702340][T16871] kobject: 'nr0' (00000000f814598c): kobject_uevent_env [ 2228.709881][T16871] kobject: 'nr0' (00000000f814598c): fill_kobj_path: path = '/devices/virtual/net/nr0' [ 2228.755774][T16871] kobject: 'nr0' (00000000f814598c): kobject_cleanup, parent (null) [ 2228.764687][T16871] kobject: 'nr0' (00000000f814598c): calling ktype release [ 2228.772182][T16871] kobject: 'nr0': free name [ 2228.780389][ T3875] kobject: 'loop5' (00000000f8c93bb9): kobject_uevent_env [ 2228.787720][ T3875] kobject: 'loop5' (00000000f8c93bb9): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2228.866003][T16938] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2228.873311][T16938] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2228.887288][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2228.890355][T16938] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2228.894412][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2228.914989][T16938] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2228.935950][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2228.943069][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' 06:51:10 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x74030000, 0x0, 0x0, 0x0, 0x0) 06:51:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x500}, [{}]}, 0x58) 06:51:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7fff, 0x8100) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000100)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000040)={0x0}) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={'hsr0\x00', {0x2, 0x4e24, @broadcast}}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)={r2}) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:51:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3e26000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x108) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x5, 0x400000) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x3, 0x4, 0x1, {0xa, 0x4e21, 0x800, @rand_addr="06ebac7a8246cd1db1ea41d3d771a34c", 0x1}}}, 0x3a) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)={0x310, 0x14, 0x20, 0x70bd27, 0x25dfdbfb, "", [@generic="aff9cb9f261c11894e839f058555400c5fdf58dd130f8c06c8e41048b156238bad9f2c6b1b809b46629b97761381bed87bbeaeb618d564a6fb936e190bf1016e5df49ac53cb9ce16f64d008f6555f2b7645b8aba293deea839ba28e675ce5dcf7f11028da8487213feb4e6daf9511ec709e85b924e30ad4bd1cb22c7ae0bbbab262cca37bde6e6f903321131599ae8fe2ba780fa111030aae90fcf4416653ca6568506fe02", @nested={0x90, 0x66, [@typed={0x14, 0x63, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @typed={0x8, 0x36, @u32=0x8}, @generic="a342b74f7530aff837753958780678f77c9fdb7248f79ab994bc471a9de4719283d131db28974bde3fc3aed8645095aef20d2f17c8741f01558fc72feaf68ae48ab481e19549ff93f345efb21e3305c4b13270b496d74d022eeeb202514f6ef215f9f645b0affcc5500f87745b992e"]}, @typed={0x14, 0x43, @ipv6=@remote}, @generic="bdb4c86f3c8a12ff79f42cc345d4dfb1703e0080eee25ce25c3851eb2ad2adb441b58acc8676cb083c01def714ea3b297d7b960a92b89e8f9d8b34be5cfca531971e8d2ac658923cff6a4c77aec6c61588f7cd0b19ab2cca63c514373d7de83f073c4392e86829240ab42453e2ea96d75ffc31bf7ca698c6b983585a1501c6f25b7fd701788e8c926aae224c3d6582dc159bcaac93efc42e", @generic="ea52cab7d518562ea018af70d0a97b22ceafb9f65b8102958ea3e53632f90052887286805526a41d9b3f2f874026ed01094a76b7143bcfcb88585239955fe3612fdef62296fe7f599290ce0b3c3f3196c7da05873f4e7f01242ed33822bb4b87efe0ff688bf0b0c1726d7cf3520fa04ddde7bcd8e63d6dae940e62a72388c777ccc8ca2a20bed01d595d02f1e9e9241c6134dc29d140ef54b637a1f6674f9e9d756e276bf902f83a44c0aa8d0336991fa3d868eda7a0f51328ef03116153f5b74d07141bb9cded5257c543e91a739d803d1eb24b460e864d461f90b09c3708680a", @generic="b49e69e48d52cbd646118a4f7a22c30c819e82aca2393574738b6ee1347e96ff6adb41434aa6a4fff4d8e77db02f6930f47b6edc349e1a90eefde0"]}, 0x310}, {&(0x7f00000007c0)=ANY=[@ANYBLOB="500100001d0001022bbd7000fddbdf25080044007f0000018c007e0008008200", @ANYRES32=r5, @ANYBLOB="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"], 0x150}], 0x2, &(0x7f0000000300)=[@rights={0x20, 0x1, 0x1, [r1, r3, r0, r2]}], 0x20, 0x24040000}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x4e, 0xfa00, @id_tos={&(0x7f0000000000), r4, 0x0, 0x0, 0x1}}, 0x20) 06:51:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x9}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000c00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/91, 0x5b}], 0x1, 0x0) 06:51:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3f00000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x4000000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2229.138825][T17234] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2229.138825][T17234] program syz-executor.0 not setting count and/or reply_len properly [ 2229.143564][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2229.163636][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2229.177470][T17237] kobject: 'nr0' (000000009c306cd8): kobject_add_internal: parent: 'net', set: 'devices' [ 2229.190156][T17237] kobject: 'nr0' (000000009c306cd8): kobject_uevent_env [ 2229.197600][T17234] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2229.197600][T17234] program syz-executor.0 not setting count and/or reply_len properly [ 2229.207362][ T7641] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2229.226187][T17237] kobject: 'nr0' (000000009c306cd8): fill_kobj_path: path = '/devices/virtual/net/nr0' 06:51:11 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x6, 0x6, 0x4, 0x30, 0x1, 0xd8}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x28, &(0x7f0000000080)}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) 06:51:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x600}, [{}]}, 0x58) [ 2229.233609][ T7641] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2229.273265][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env 06:51:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x4800000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") [ 2229.290141][T17237] kobject: 'queues' (0000000094b64ebc): kobject_add_internal: parent: 'nr0', set: '' [ 2229.310435][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2229.321510][T17401] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2229.321510][T17401] program syz-executor.0 not setting count and/or reply_len properly 06:51:11 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) prctl$PR_SET_TSC(0x1a, 0x0) [ 2229.342893][T17457] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2229.343496][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2229.355446][T17457] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2229.357642][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2229.367511][T17237] kobject: 'queues' (0000000094b64ebc): kobject_uevent_env [ 2229.379201][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2229.392325][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2229.400178][T17237] kobject: 'queues' (0000000094b64ebc): kobject_uevent_env: filter function caused the event to drop! [ 2229.403520][ T3875] kobject: 'loop0' (000000007038bad8): kobject_uevent_env [ 2229.421024][ T3875] kobject: 'loop0' (000000007038bad8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2229.442315][T17237] kobject: 'rx-0' (0000000067532a5f): kobject_add_internal: parent: 'queues', set: 'queues' [ 2229.447007][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2229.460353][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2229.461465][T17237] kobject: 'rx-0' (0000000067532a5f): kobject_uevent_env [ 2229.474703][ T3875] kobject: 'loop4' (000000002db3cce5): kobject_uevent_env [ 2229.482516][T17237] kobject: 'rx-0' (0000000067532a5f): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' [ 2229.485174][ T3875] kobject: 'loop4' (000000002db3cce5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2229.502288][T17237] kobject: 'tx-0' (0000000067ba71d5): kobject_add_internal: parent: 'queues', set: 'queues' [ 2229.506877][ T3875] kobject: 'loop0' (000000007038bad8): kobject_uevent_env [ 2229.517666][T17237] kobject: 'tx-0' (0000000067ba71d5): kobject_uevent_env [ 2229.523562][ T3875] kobject: 'loop0' (000000007038bad8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2229.533914][T17237] kobject: 'tx-0' (0000000067ba71d5): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' [ 2229.542538][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2229.559598][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2229.562356][T17457] XFS (loop2): Invalid superblock magic number [ 2229.570660][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2229.583474][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2229.599256][T17237] kobject: 'rx-0' (0000000067532a5f): kobject_cleanup, parent 0000000094b64ebc [ 2229.608790][T17237] kobject: 'rx-0' (0000000067532a5f): auto cleanup 'remove' event [ 2229.628653][T17237] kobject: 'rx-0' (0000000067532a5f): kobject_uevent_env [ 2229.637818][T17237] kobject: 'rx-0' (0000000067532a5f): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' [ 2229.650280][ T3875] kobject: 'loop4' (000000002db3cce5): kobject_uevent_env [ 2229.655158][T17237] kobject: 'rx-0' (0000000067532a5f): auto cleanup kobject_del [ 2229.658323][ T3875] kobject: 'loop4' (000000002db3cce5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2229.665383][T17237] kobject: 'rx-0' (0000000067532a5f): calling ktype release [ 2229.686431][T17237] kobject: 'rx-0': free name [ 2229.691097][T17237] kobject: 'tx-0' (0000000067ba71d5): kobject_cleanup, parent 0000000094b64ebc [ 2229.702935][T17237] kobject: 'tx-0' (0000000067ba71d5): auto cleanup 'remove' event [ 2229.711421][T17237] kobject: 'tx-0' (0000000067ba71d5): kobject_uevent_env [ 2229.721349][T17237] kobject: 'tx-0' (0000000067ba71d5): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' [ 2229.732874][T17237] kobject: 'tx-0' (0000000067ba71d5): auto cleanup kobject_del [ 2229.743204][T17237] kobject: 'tx-0' (0000000067ba71d5): calling ktype release [ 2229.752440][T17237] kobject: 'tx-0': free name [ 2229.760170][T17237] kobject: 'queues' (0000000094b64ebc): kobject_cleanup, parent (null) [ 2229.769992][T17237] kobject: 'queues' (0000000094b64ebc): calling ktype release [ 2229.780585][T17237] kobject: 'queues' (0000000094b64ebc): kset_release [ 2229.787922][T17237] kobject: 'queues': free name [ 2229.793050][T17237] kobject: 'nr0' (000000009c306cd8): kobject_uevent_env [ 2229.803085][T17237] kobject: 'nr0' (000000009c306cd8): fill_kobj_path: path = '/devices/virtual/net/nr0' [ 2229.855821][T17237] kobject: 'nr0' (000000009c306cd8): kobject_cleanup, parent (null) [ 2229.868637][T17237] kobject: 'nr0' (000000009c306cd8): calling ktype release [ 2229.876800][T17237] kobject: 'nr0': free name [ 2229.884689][ T3875] kobject: 'loop5' (00000000f8c93bb9): kobject_uevent_env [ 2229.891951][ T3875] kobject: 'loop5' (00000000f8c93bb9): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2229.956273][T17457] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2229.963475][T17457] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2229.977456][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2229.980610][T17457] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2229.984579][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2230.007066][T17457] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2230.025907][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2230.033047][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' 06:51:12 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x7a000000, 0x0, 0x0, 0x0, 0x0) 06:51:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x700}, [{}]}, 0x58) 06:51:12 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2200, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x1}}, 0x18) write(r1, &(0x7f0000000100)="c9f88576010cf09763b08399389ec27b43fc48a22ae05ba443d584feee7389866eab85f91d947b265f59739a96f9b123c31d4453a98223ab67257698b960d21a89616821d8d9f377e51dc9316b4e8956de7c0a0d62f1eb0dc713a4c526a6646b6bb6fae1bc35837b1d57905e172278e5f2d3eed449114ea18d08f68c84e2de589380df446bf1779b0203dbaa36176beb9e71f2d9a44b43d6220c0e65281a90c6ed3b9587b0916b7e093fd43169768248d3ed", 0xb2) 06:51:12 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x4c00000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r2, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r2}}, 0x1d4) 06:51:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000c00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/91, 0x5b}], 0x1, 0x0) 06:51:12 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:12 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000009c0)={{0x4, 0x6, 0x5, 0xff, 'syz1\x00', 0x7}, 0x0, [0x7, 0x365, 0x7fffffff, 0x8, 0x3, 0x0, 0x8, 0x8, 0x82, 0xff, 0x8f, 0x9, 0x7, 0x9, 0x4, 0x0, 0x1, 0x100, 0x8, 0x4, 0x800, 0x2, 0xfffffffffffffffc, 0x5, 0x51e, 0x0, 0x2, 0x8000, 0x8, 0x1, 0x2000000, 0x6, 0xfffffffffffffc00, 0x3fffc000000, 0x5, 0x80000000, 0xb9e7, 0x8001, 0x3, 0x3, 0x9, 0x401, 0x9, 0x6, 0xfffffffffffffffd, 0x9, 0x9, 0x2, 0x80000000, 0x8, 0x40, 0x2, 0x1f, 0x800, 0x5, 0x6, 0x6, 0x8001, 0xff, 0x5, 0x6, 0x97, 0x80000001, 0xc390, 0x12, 0x8, 0x7, 0x8, 0x7, 0xe68c, 0x0, 0x6, 0x8, 0xfffffffffffff801, 0x3f, 0xfffffffffffffffc, 0x2, 0x6, 0x8000, 0x91, 0x400, 0x400, 0x9, 0x100000000, 0x7, 0x7ff, 0x1000, 0x4, 0x8, 0x7fffffff, 0x10001, 0x4, 0x1, 0x9, 0x0, 0x3, 0xffffffff, 0xffff, 0xfff, 0x0, 0x7fffffff, 0x5, 0x1, 0x8000, 0x7f, 0x100, 0xff, 0x1, 0x0, 0x2, 0x8000, 0xfffffffffffff000, 0x10001, 0x7, 0x7fff, 0x800, 0x1, 0x9, 0x7, 0x8b05, 0x2, 0xffff, 0x4, 0x800, 0x20, 0x0, 0x297, 0x3], {0x77359400}}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000005c0), 0xffffffffffffffff, 0x1}}, 0x18) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="876c21010a043fda119f43326927cbefc42d0ac2caedcbce5a80d9b5f22532174cf47d7821a8ab4cba75d487e0ba6edc57cdfa312c85922154c43a4c557d93501d95c3c7abf2eba358e56ef2bf424193554b440db2c65c98a1ba8d62ec59aeb2701d073cd037035d050a743e04ea96fc6bc444a29ddb248345115f2f27a583d41daa22112837", 0x86, 0xfffffffffffffff9) r3 = getuid() getgroups(0x6, &(0x7f0000000300)=[0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r2, r3, r4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r5, 0x0, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x7, 0xcd, 0xdf0, 0x6}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x10) fcntl$setpipe(r0, 0x407, 0xfb8e) [ 2230.242032][T17591] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2230.242032][T17591] program syz-executor.0 not setting count and/or reply_len properly 06:51:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x2000}, [{}]}, 0x58) [ 2230.289140][ T7641] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2230.305476][ T7641] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2230.326372][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2230.333528][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' 06:51:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000c00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/91, 0x5b}], 0x1, 0x0) 06:51:12 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x6800000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:12 executing program 3: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x2d) [ 2230.390717][T17807] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2230.390717][T17807] program syz-executor.0 not setting count and/or reply_len properly [ 2230.392368][ T3875] kobject: 'loop0' (000000007038bad8): kobject_uevent_env [ 2230.417129][ T3875] kobject: 'loop0' (000000007038bad8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2230.419274][T17808] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2230.438608][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2230.443684][T17808] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2230.446075][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2230.466716][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2230.478564][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2230.494201][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2230.501600][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2230.537258][ T3875] kobject: 'loop5' (00000000f8c93bb9): kobject_uevent_env [ 2230.544657][ T3875] kobject: 'loop5' (00000000f8c93bb9): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2230.550365][T17808] XFS (loop2): Invalid superblock magic number [ 2230.556056][ T3875] kobject: 'loop4' (000000002db3cce5): kobject_uevent_env [ 2230.568929][ T3875] kobject: 'loop4' (000000002db3cce5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2230.579603][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2230.590019][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2230.600491][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2230.607630][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2230.618141][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2230.625278][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2230.635804][ T3875] kobject: 'loop0' (000000007038bad8): kobject_uevent_env [ 2230.642930][ T3875] kobject: 'loop0' (000000007038bad8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2230.653367][ T3875] kobject: 'loop5' (00000000f8c93bb9): kobject_uevent_env [ 2230.660517][ T3875] kobject: 'loop5' (00000000f8c93bb9): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2230.935943][T17808] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2230.943201][T17808] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2230.957169][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2230.960335][T17808] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2230.964306][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2230.985045][T17808] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2231.005933][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2231.013058][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' 06:51:13 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x7c030000, 0x0, 0x0, 0x0, 0x0) 06:51:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={r3, 0x2}, &(0x7f0000000200)=0x8) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) 06:51:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x0, [], 0x0}) 06:51:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x6c00000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x4000}, [{}]}, 0x58) 06:51:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000c00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/91, 0x5b}], 0x1, 0x0) 06:51:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x7400000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x0, [], 0x0}) 06:51:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x9}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000c00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/91, 0x5b}], 0x1, 0x0) 06:51:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x4800}, [{}]}, 0x58) [ 2231.216015][ T7641] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2231.225869][ T7641] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2231.254310][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2231.283908][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2231.301568][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2231.309131][T18014] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2231.316478][T18014] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' 06:51:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x7826000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x0, [], 0x0}) [ 2231.326802][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2231.339382][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2231.374306][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2231.411420][ T3875] kobject: 'loop5' (00000000f8c93bb9): kobject_uevent_env [ 2231.418791][ T3875] kobject: 'loop5' (00000000f8c93bb9): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2231.429421][ T3875] kobject: 'loop0' (000000007038bad8): kobject_uevent_env [ 2231.436585][ T3875] kobject: 'loop0' (000000007038bad8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2231.448085][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2231.455211][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2231.465740][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2231.470122][T18014] XFS (loop2): Invalid superblock magic number [ 2231.472879][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2231.489458][ T3875] kobject: 'loop4' (000000002db3cce5): kobject_uevent_env [ 2231.496618][ T3875] kobject: 'loop4' (000000002db3cce5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2231.506986][ T3875] kobject: 'loop0' (000000007038bad8): kobject_uevent_env [ 2231.514139][ T3875] kobject: 'loop0' (000000007038bad8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2231.524621][ T3875] kobject: 'loop5' (00000000f8c93bb9): kobject_uevent_env [ 2231.531749][ T3875] kobject: 'loop5' (00000000f8c93bb9): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2231.542194][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2231.549334][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2231.559785][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2231.566934][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2231.965882][T18014] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2231.973120][T18014] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2231.987082][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2231.990416][T18014] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2231.994208][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2232.014945][T18014] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2232.035948][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2232.043082][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' 06:51:14 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x80010000, 0x0, 0x0, 0x0, 0x0) 06:51:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x13f, 0x9}}, 0x20) 06:51:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x4c00}, [{}]}, 0x58) 06:51:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x9}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000c00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/91, 0x5b}], 0x1, 0x0) 06:51:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x7926000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x0, [], 0x0}) 06:51:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x0, [], 0x0}) [ 2232.223721][T18205] sg_write: 4 callbacks suppressed [ 2232.223754][T18205] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2232.223754][T18205] program syz-executor.0 not setting count and/or reply_len properly 06:51:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x7a00000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x6000}, [{}]}, 0x58) 06:51:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x9}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000c00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/91, 0x5b}], 0x1, 0x0) [ 2232.278963][ T7641] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2232.309421][ T7641] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2232.335920][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2232.357144][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2232.371134][T18315] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; 06:51:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x7fffffffffffffff, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00'}, 0x30) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x20000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, r4, 0xa00, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x24}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x546c}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7) [ 2232.371134][T18315] program syz-executor.0 not setting count and/or reply_len properly [ 2232.386843][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2232.401913][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2232.419945][ T3875] kobject: 'loop0' (000000007038bad8): kobject_uevent_env [ 2232.430139][T18322] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2232.439637][T18315] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2232.439637][T18315] program syz-executor.0 not setting count and/or reply_len properly [ 2232.442368][ T3875] kobject: 'loop0' (000000007038bad8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2232.470986][T18322] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2232.482554][ T3875] kobject: 'loop5' (00000000f8c93bb9): kobject_uevent_env [ 2232.497476][ T3875] kobject: 'loop5' (00000000f8c93bb9): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2232.512356][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2232.519901][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2232.531067][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2232.538531][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2232.549869][ T3875] kobject: 'loop4' (000000002db3cce5): kobject_uevent_env [ 2232.557257][ T3875] kobject: 'loop4' (000000002db3cce5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2232.568831][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2232.576340][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2232.587559][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2232.594761][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2232.605961][ T3875] kobject: 'loop0' (000000007038bad8): kobject_uevent_env [ 2232.613504][ T3875] kobject: 'loop0' (000000007038bad8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2232.615361][T18322] XFS (loop2): Invalid superblock magic number [ 2232.624156][ T3875] kobject: 'loop5' (00000000f8c93bb9): kobject_uevent_env [ 2232.637180][ T3875] kobject: 'loop5' (00000000f8c93bb9): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2232.647687][ T3875] kobject: 'loop4' (000000002db3cce5): kobject_uevent_env [ 2232.654797][ T3875] kobject: 'loop4' (000000002db3cce5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2233.035850][T18322] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2233.043101][T18322] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2233.057456][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2233.060162][T18322] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2233.064584][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2233.084925][T18322] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2233.105950][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2233.113081][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' 06:51:15 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x80969800, 0x0, 0x0, 0x0, 0x0) 06:51:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x0, [], 0x0}) 06:51:15 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x8000000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x6800}, [{}]}, 0x58) 06:51:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x9}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000c00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/91, 0x5b}], 0x1, 0x0) 06:51:15 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000001c0)=""/247) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0xfffffeb4, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x29) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r2, 0x0, 0x0, 0x1}}, 0x20) 06:51:15 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x8cffffff00000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x0, [], 0x0}) [ 2233.334796][T18566] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2233.334796][T18566] program syz-executor.0 not setting count and/or reply_len properly [ 2233.343667][T18562] kobject: 'nr0' (000000005d62f39b): kobject_add_internal: parent: 'net', set: 'devices' [ 2233.376271][ T7641] kobject: 'loop2' (00000000ee456106): kobject_uevent_env 06:51:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x6c00}, [{}]}, 0x58) [ 2233.379807][T18562] kobject: 'nr0' (000000005d62f39b): kobject_uevent_env [ 2233.389842][ T7641] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2233.401763][T18562] kobject: 'nr0' (000000005d62f39b): fill_kobj_path: path = '/devices/virtual/net/nr0' [ 2233.422978][T18562] kobject: 'queues' (000000000f53c4f2): kobject_add_internal: parent: 'nr0', set: '' [ 2233.433549][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2233.447614][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2233.460501][T18562] kobject: 'queues' (000000000f53c4f2): kobject_uevent_env 06:51:15 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xb400000000000000, 0x0, 0x0, &(0x7f0000000680)={[{@nodots='nodots'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") 06:51:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x0, [], 0x0}) [ 2233.486346][T18677] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2233.489789][T18562] kobject: 'queues' (000000000f53c4f2): kobject_uevent_env: filter function caused the event to drop! [ 2233.497619][T18684] sg_write: data in/out 327644/46 bytes for SCSI command 0x0-- guessing data in; [ 2233.497619][T18684] program syz-executor.0 not setting count and/or reply_len properly [ 2233.504954][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env 06:51:15 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)='logon\x00', 0xffffffffffffffff}, 0x30) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xa6, 0x80000) ioctl$TIOCLINUX6(r3, 0x541c, &(0x7f0000000080)={0x6, 0x1}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000005c0)={0x0, 0xb000000, &(0x7f0000000600)={&(0x7f0000000480)=ANY=[@ANYBLOB="d991fa24fb3071026c60000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000300004c4c00f4ff37000400200001000200000000000000fe8000000000000000000000000000000000000014000200020000000000000000100001007564703a73797a3100000000"], 0x60}}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000002c0)={0x3, r3}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x2}}, 0x20) r6 = add_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="87db242f30562c40a31202bbd040a69fc6b9231f6121766eefe6fc17a76eb4d4740058c992d2b5afe32f88644c6b8c233e31eb53e50ee64478e93af003e91b8980be061e018a962007e5718afb0fc5832f6f253fccf9fe5ff046ca1ff1cfb8659cf286afce8462bbd03ca88a3ecb2c5ce693580edae36622778a7989282de7d670bfb94fb5b97c3e01a085c70887b1752ced8b5921df4aeb94ad78b1b6684f29af8fba6cc7c6d2b8f890e54c170ebe89bd", 0xb1, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_QUERY(0x18, r6, 0x0, &(0x7f0000000140)='TIPCv2\x00', &(0x7f0000000280)) [ 2233.530337][T18562] kobject: 'rx-0' (0000000035eb5902): kobject_add_internal: parent: 'queues', set: 'queues' [ 2233.534474][T18677] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2233.540697][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2233.569507][T18562] kobject: 'rx-0' (0000000035eb5902): kobject_uevent_env [ 2233.584945][T18562] kobject: 'rx-0' (0000000035eb5902): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' [ 2233.602378][T18562] kobject: 'tx-0' (00000000ff0a097f): kobject_add_internal: parent: 'queues', set: 'queues' [ 2233.613305][ T3875] kobject: 'loop2' (00000000ee456106): kobject_uevent_env [ 2233.621321][ T3875] kobject: 'loop2' (00000000ee456106): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2233.632023][T18562] kobject: 'tx-0' (00000000ff0a097f): kobject_uevent_env [ 2233.639369][T18562] kobject: 'tx-0' (00000000ff0a097f): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' [ 2233.650877][ T3875] kobject: 'loop0' (000000007038bad8): kobject_uevent_env [ 2233.658179][ T3875] kobject: 'loop0' (000000007038bad8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2233.668879][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2233.676186][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2233.686828][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2233.689095][T18677] XFS (loop2): Invalid superblock magic number [ 2233.694053][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2233.710782][ T3875] kobject: 'loop4' (000000002db3cce5): kobject_uevent_env [ 2233.718056][ T3875] kobject: 'loop4' (000000002db3cce5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2233.728698][ T3875] kobject: 'loop0' (000000007038bad8): kobject_uevent_env [ 2233.738697][ T3875] kobject: 'loop0' (000000007038bad8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2233.749426][ T3875] kobject: 'loop1' (000000008e2153a1): kobject_uevent_env [ 2233.756615][ T3875] kobject: 'loop1' (000000008e2153a1): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2233.756641][T18561] kobject: 'rx-0' (0000000035eb5902): kobject_cleanup, parent 000000000f53c4f2 [ 2233.767212][ T3875] kobject: 'loop3' (00000000c9c48df2): kobject_uevent_env [ 2233.779493][T18561] kobject: 'rx-0' (0000000035eb5902): auto cleanup 'remove' event [ 2233.783129][ T3875] kobject: 'loop3' (00000000c9c48df2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2233.783538][ T3875] kobject: 'loop4' (000000002db3cce5): kobject_uevent_env [ 2233.791253][T18561] kobject: 'rx-0' (0000000035eb5902): kobject_uevent_env [ 2233.801256][ T3875] kobject: 'loop4' (000000002db3cce5): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2233.811313][T18561] kobject: 'rx-0' (0000000035eb5902): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' [ 2233.840422][T18561] kobject: 'rx-0' (0000000035eb5902): auto cleanup kobject_del [ 2233.848227][T18561] kobject: 'rx-0' (0000000035eb5902): calling ktype release [ 2233.855557][T18561] kobject: 'rx-0': free name [ 2233.863815][T18561] kobject: 'tx-0' (00000000ff0a097f): kobject_cleanup, parent 000000000f53c4f2 [ 2233.873042][