n6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:01 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:01 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:01 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[  400.414041][   T26] audit: type=1800 audit(1574565601.515:47): pid=9298 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16733 res=0
[  400.658814][ T9313] XFS (loop5): Invalid superblock magic number
03:20:02 executing program 1:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:02 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:02 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:02 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  401.848052][   T26] audit: type=1800 audit(1574565602.955:48): pid=9336 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16725 res=0
[  402.218040][ T9345] XFS (loop5): Invalid superblock magic number
[  402.322946][ T9354] XFS (loop0): Invalid superblock magic number
03:20:03 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:03 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  403.189517][ T9376] XFS (loop5): Invalid superblock magic number
03:20:04 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:04 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:04 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:04 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:04 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

03:20:05 executing program 1:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[  404.194900][ T9398] XFS (loop0): Invalid superblock magic number
03:20:05 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:05 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[  404.650297][ T9427] XFS (loop5): Invalid superblock magic number
03:20:05 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:05 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  405.061918][   T26] audit: type=1800 audit(1574565606.165:49): pid=9446 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=16759 res=0
03:20:06 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

03:20:06 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

[  405.437364][ T9455] XFS (loop0): Invalid superblock magic number
03:20:06 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:06 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[  405.953761][ T9479] XFS (loop5): Invalid superblock magic number
03:20:07 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

03:20:07 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

03:20:07 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[  406.699211][ T9499] XFS (loop0): Invalid superblock magic number
03:20:08 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000f21301ce646ba1a345"], 0x1}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:20:08 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

03:20:08 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:08 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:08 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:08 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:08 executing program 1:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe(&(0x7f00000004c0))
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

03:20:09 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  407.897400][ T9531] XFS (loop0): Invalid superblock magic number
[  408.005802][ T9543] EXT4-fs (loop1): bad geometry: block count 1080 exceeds size of device (1 blocks)
03:20:09 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x1000000000000, 0x0, 0x0)
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)=0x10000000006)
write$UHID_INPUT(r0, &(0x7f00000002c0)={0x8, "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", 0xa943708f26830065}, 0x1006)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x0, 0x7, 0xd, 0x0, r0, 0x0, [], 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x255)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x100000001, 0x0, r1}, 0x3c)
r2 = syz_open_dev$dspn(0x0, 0x0, 0x0)
write$vnet(r2, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000040)=0x10000000006)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x8, "b13e1c20d1764d052a4289a71186ca1abfa7f39eb694f4602948f6585c2842ac42cb2f94b098e98f28cd6128dab4a71d544e96e01e3a9a3548ee5f554c06d963346edb9d133e86fdd31c21e9aaffeb52f7cd63297b1fd0db1845e12bda3ce00f0cca0e6ac9c42a61e687c24c0553b408359c86c7bfd7a30944ac327f982b011258e85ee00f050c38e73199d07b72b225a96ab0fb5a9ea944a233e46cd4c25aaa0fe04bd9b3203f61a06c8f094563ffa0078e50248ce1acebc03c75069eb1cb20ebbe30ec063f9ebc45290dc4f8b56ebb08d32e4df04785fd385029f766a0b96db6a1b6615de63393fe97082c076a7170d2b1c06ce0627d6acae850c2b95f38b079a352f27bf6f5460078b8e597c1d3bdb5cf9e73f42eec5aea224ab44b94e18e812864faeaf770ba7471f99b07d41d573d1d4c3833fb4410ea36d710bfa66ccdb14a1927a678f873b023e82c341a43704adb37242a67b2a46d02ab7aee23cf3030a2f3dd58eece667b6e9393ee8d36649e37e83b1c73c0ef65b4df6173c1c25324fbb9afa1361dc4275f152deb03d7138a688eb9dc66e7845ce1be5647bf740b0e1dd038120ef1e3e1cf420cf8b723bef771376e433935e4f9096a10c4a969aceaac4791c41f365b274dab49bddf51b22a24c05ceaedcbf45febc927e98f410d38247d7679cee7b0d3041eaebd7821924ad31e7c5137bf87ce1ec537a981779f0a4c57bbbb5c641cfd02e1e3904f48b0be96fc9851b6bc8c4260168eea9d9d111e2777f78a9021d5eb0166e39410bf279656770263ca2fb7ac0e30d5e168f8cf4bc5665d057da939b770568e41d0fcec5d6aac0bf4ae66fb099b786cdce7f6a9bc00b83d8ed72440a9724d4ef8af71c7efbc31397930cdcb99d30502ecbcc7ddb9161ade16a1badbd7ea3c6c65b387b46234c4660c816506a2f76264bba07ecb685532116bd971464b58e3ea0a29c2fa1d49d9c6308806db01326e9a1b6bbb556f6479b29f48718e211d75f08d0fb477ad8dae5aeaad7e176b2c5ae331ef78212e9dd7e506549dc74ffd940dc91d74aee2fa7f28855919c163f443804e2a072ad8add2be84df87e414afcab0f8e6f67d3ebb1778a6798d50233da09d29b95c0da97304b7a025e50a7c89e614c63bc69477bfe0e5ae2c468332d134f9e22b19eb2f01c8e8d5148b9b980f8b9aa0cab9ba89aafe16d6a8cf9cb5ae659d8fba88e2841f3d6ac0c44dd9f03787d357fe31a4f551e247bfb73b1f2aa1e208c36aa90dcfc4da8877967c05fe951716ec2293d79c6083e79061bbe18150e2af1d889bb4e87c7735b0e7b88a3109a906d1bd4bf9b98c2462420ecc4e9f3a274a6678bc56e9aa7f3d64677141f874f35d00d04a1dc83126ccd69a0221305a3a5418ec24e163b165c1e4533c38f3d213de4012aece68ed11e2f42325d6da5eef78ee985f81a7991e3d1ff69188059c292779579418ef81177fa94b43cdd0fbf92d31f0fb592a864ddc98ddd5b49ece865e7c7a6c873169d0eea46c1a44f645b1cfa40849ffb9f5355ab396dc1a875180f17103be63be4e7d1920949c59ba5d47341c176ac307e165b9733ac5cd9e9691f5ecd76b467881b78f217d50903a06c57270f4104fd26d496dd7e08c27209185761882923f6447c73d53a74e28132e6bf97ee4f2df9d03be88653a9a7251d8df247f1a75f91f95886ce317e3c125aa7686eec86708fa72c9b33a664e76c0ed891ff9d840ac121ae3f96d32330a14fd76df19c7ae0434e2103d6e9175da0b6cc7a007a0a18615271771434959de305636cf7fbfdd16239bff7dbc656a702ebd48f9a2b1937cca80604ec525d292bb7337459235ad047c6933b6c81bd966ea60ec863de568a9e6d8e0378916f441e0f8b2b74df49b9b24094fd643413469428a537aed19b72bf9381ebab4cd57400ecad1cf1b792e9610910d02f9a779b009840e3f1a1395a87f1e590c33018be80a3f34bbaf49e415ba7d3858b40788cd19211b8cad3789870fb252f8991d64bff9558a67a2316ec2402c2f9c52de42e6389fc90bc4379f7b899b1a943035d64f20b7766edf08fdfa185d00493031f0d3f9ad7dce841f725c5adcba896a76857918a2f54c8aa2e50f71eda35b8fea3732a02c146201ad9f4b65b7caa09e2a73f72aee1ce428a35489038d5cc859fbd48be8da5d088ccab897a248fe418b89b409ab5507af725f077d264abec5b53667ca06aed03815dd537535a3360a50ca3d09c025b5057362c7cb5a4b99c58ac64fe813f4d7f2cafbc3048835ec43fa68170ec7310342134c9b5ec417763db145555cdd37f24b27b0911d172710b74d3c754aac02b24030166cbf2eccfaf1e909b629b7919db1351cd0167e8b6bddc5ce4b7e13cbf0c095f636427d440d058e7637eb117947fc6a60942d10bd455030ee38fc447fd3e6232efba65def558dcff60274e6b2ad62464b4f767bcfec22c681c12bdabf1fedc3946f45c9a34a9169f79ea60a9d190dcf1ce14957382af602dd134b610b269247f38c3d4e233f2fda399dc4cf09139cff9e9c731f8bf940df3cbdf9355f604bd0f3d3b20a6cfc39a7d9ff74f734750187b30c1a970a432bf7e9417cc87d8dea00c4e1885845e1a59bc6a5487687c5bca514e9dcf372bcdc0fe4a47f3e4ac456b1a812e69f88b2a8a964d946cc102ba6f3a7c965df24653c6384d810cf157c8581d4b40e874aded8d227a25fab9889f02698bf52980f048408de4a96226949eba5d1b7f41fce61ae1ff9388e096646ddda4c222f7b9bffc1d3e5b645b6e248637698f6a5be1dc03ff7aa9f418153beeef9b9d67ac5b6fc888e5adf0db41a6d5cac2b600af3b428a1294f4fdb4cf64ccc254c1c7ef71b9be3afceb797fc9504bc3f3dde217687d47cd445c44bea2b16eacae76f16d868b77065b189bd7c4678f3a5fc99b4d020d42972d010b7a6b22de46b434f2d8ec4f567af2d531817ec81ffa36cc27d073a66d2152f1be2a8dce08e98a00f473f22e680cf0ebdcf37936cee60f99eec69503a15d8e36f8d599b535021693fb52f9dc93e315d6e849bd4bf9d05fb25f0b09de91b73ca4edfbfa04d9262d449eab2be542ea30f316384609efc52ed641a9e32d48e4a57c65e8bfa5c13e769d5402a0b125c17360800bf0da8592a75abe647f1d9b1072942947da82e701308b60ecdcfd40d7b6cf44b443493ef0466790547c0a8e5914484969e52cba3787c41df965f91ed7074cd62a63db7e1c35b8f9ac30521295ae7b9c81143926f1dd36aefdfbcd7056b0d4209cabe113a18c58ecc062df687666725707029a8be3ef5721484bd429bab33fceb76c6a0f079da8819d0d9565f5e4ed45eb531f9501b85b619b5323169b0297b7cedcf6f288225dd5e6a7f52c1b96cd38dd94b2f6b8cfc6dbd7862901a5295dca5ecbae72344f41c4a222bd6711831d265b910d547501116bcfbf3c9e104b446175c4c8a4e56445ca22f9363f0f54858a8eb4a1c43103bca578c5b0ee372efd705a950510dbbfa4f74c8ddb4bbc1f07dd410ebb39c01f4da8a0bad2d3d35df3a12a9fa2daf44c8163d59aba8a7351ecc9fe4cd25b987dba700e73d7174307161adf70db0e7a802d7c9ec1b912ee58b0a35c2c6f40f112d70ab5aa708071379280c9ffbceaf0a4ec45c89ac0bf3ef40538302b685e24574da8bde8654e99eff66c9ad5e6beafa0e48e1c293c53d955980346cbc052d15e5d1f3baed388dfaa72ca089af06ae757466a704b93a0ff13cb5c722f0b872432a4fd4513ed56825b13ddd4d8c02eb624c8358199f52679421ab0e1792869f6b4aea523a1079b3138f1ef761c6df102096eff43ddb23ee668b9cc5161433feb318903b58387c3dae2833a8c770e7c6e27c31a1fca07377fbb07f11911be6192f7518a8d089b89826e48b28f5c8a00784bef9b2f68c90838eb2c9fcaeda4bb76782510082c977a7ecdd5743e9da8f088a3b67a25cfb25db4a709b6cbf5425e7efa8c2e472464606d9ccd2fc0f73cd1d51a5aa19d9caba10be2147f8e1ad763ba45693f9f078b0716cf588142be847ca67dc132c5782fed12b7d95c55a9bcfdfb85cb48698a45621cc2f1c85559617ece7def71486290b0cf8e987e8788e1a13f17e3f24b93ed2009ebe42e3bea9571f98b39b787c107dcada3a36fa1fe93736e74ec34af80a182cf0adf2846577f1d474c9ff1b4b8a2cfe6a2d445029ca77088b9c84be63655d48cbc5f61b18d7cda0d141f2db6bc3c479aa6ca19638e2c37da38768eb8820e5679345d2abe8033318eb952e297e17dacaaee3df7ef1d6cd554e9b1b453c44e3d4e030e25c5f9ed094100f6d9b1dc5dab371436ab252cc4d7fdf8fe4b7f36ab71f2bbe3878217b151664c3b9ae970e473ae164d77f294ca8ad58634ea446880e8327fc7af2a088e39508443a601eaa00742a7d0ad459dcac24a60edcfa6ac9f72f428c2b8dd30b8278e28f25a1a129d23cacd765de4c4aa52819578951bb8e311e8621f627e3463e2562b6dbc8d1c431c240f1424599438b9c94723f79ffd1fa1bc94104e4598bd43244302f86ddbe47ad8671e25f406aa507ba45bdba09841827a697cece002f79ec7cf14488789d754f84818d180bd04a11cb2115441a402bea2be749ef233bcd26ca27df828ada877a893e54ea3e6ea29e62d6e7693af7cbee59ccdb4045d0e6eeec3d8f59205f324a5f7cf5f871929c83ada04bc5d3990288dca5eb312339933ffb1031e05866e1b2d0aad0ca940795458b7d6c8a3750a76e1e6c8ccd48ca542d6c51164431d70c9d35f0f828cdec404a175a44bc2a9651ec5281c0f3aee9e4375f0eb139f58fa4419fddf9ebe2f8f37121a57397e7e830ac097ed375521a68f7cdc471621b769fef40cd19d8d55a82e27bf5b0cc4182359db7c9066e2ee10df279a89e96fcfea225995f065f7f286b8c8ef9b6c82a34df14dda2f737f557578ce5b15944e3149110102d80465c1b436b6bbb16fdc64a9d130ec7644bc162f0e2c5669a9254970a062561e269d85b72b4748d71d88ca20778287bc3b9613043166862f133f366f6361b9e1d040bbcd9728a70fcf3be7ea8fe0f55980ed03f336ec49f7cb6899813acf47d3b2413e7b637b764fcb9003ece75f8a255b9cdc71f80dbbaa7eaa2111b5551feeb7ea31620a2c88897538915abedcd184d57c79d81505985f561820449c330bc3412bffb68c4c743c5a5a3acafcf00d7561a66f70e5835da530ba62f221211e1fefdc1fbc8c05b1b68b7eb2afac6ebbbc0b961b8ef8b27b555ce7641f6601ac19d5f4adb06b40155a2085ff32de5b2c5edd96a01a14d1bb49b58f1fd718bec428043819b8070e46f0215d2153318320754638d9b40a5214784e7c1f80dde05500cfe8e4dff855504e099634fb3d44829453cf4ac8db7e5a4144f96d4508de90ada04240637fd5b261cfbb80c8d9ccdea6c1d3485a85663cff9749133002c7f9c6ea4de1b50fe90dae397f6b5833e943e6c5f60e10d805e97e6869488b857b44d8c94276f668257c223e2e26dff75222d3f304f8a040ce058e1b7b3bc5f0b69c310beea64212ef0a54bc9fb858c25681cee574c532b64d4f8241e0b855f7f79d0a1ea22fc3d9ad5a1658b5c4d9d417e9eae47c81628341172609a8ef8c72fb6e4e48da6a10207e56b727f65c82d49e2dbb44b492e1265c2b28f98980334ccc3abb0cfd15d73c2f38f4c824022aa7a0ac0b7d35eea934d3455d21e8c710474e54bdf29be107ebc00", 0xa943708f26830065}, 0x1006)
openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$set_timeout(0xf, 0x0, 0x0)

03:20:09 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:09 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:09 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:09 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  408.912497][ T9586] XFS (loop0): Invalid superblock magic number
03:20:10 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr="ebeea04e706811856ce3ca108cb516b3"}}}, 0x30)

[  409.314320][ T9604] XFS (loop5): Invalid superblock magic number
03:20:11 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:11 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:11 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:12 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:12 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0xff)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="f67f986af9dc3ba1fe8000000000000087209739ae649266f062bcd978b94585b9bf1100ed8bc3b5", 0x20000128}], 0x1}, 0x0)

03:20:12 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:12 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
close(r1)
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:12 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:12 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
close(r1)
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:12 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r2 = socket$inet6(0xa, 0x80003, 0xff)
ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071")
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="480000001400190d09004beafd0d8c560284ed7a80ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00009052946f02", 0x48}], 0x1)
recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0xffffffffffffffea, &(0x7f0000000000)=[{&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f0000000180)=""/157, 0x2}, {&(0x7f0000000500)=""/4096, 0x10ac}, {&(0x7f0000001580)=""/220, 0xdc}], 0x4}}], 0x4, 0x0, 0x0)

03:20:12 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  411.248939][ T9647] XFS (loop5): Invalid superblock magic number
03:20:12 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
close(r1)
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:12 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:12 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  411.693285][ T9682] XFS (loop0): Invalid superblock magic number
03:20:12 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:15 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:15 executing program 1:
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0), 0xfffffef3)
openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)

03:20:15 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:15 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:15 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:15 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:15 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:15 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:15 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:15 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:15 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:15 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:15 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:16 executing program 1:
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x1, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000140))
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r2, 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x400420, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000000c0)="0f20d86635200000000f22d826d33566b91109000066b80060000066ba000000000f306766c74424000d0000006766c7442402f60000006766c744240600000000670f0114246766c74424003f8c00006766c7442402e4d400006766c744240600000000670f011424660f38827500b8dd000f00d80f21f30f01c3ddc3", 0x7d}], 0xb, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000000100050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x501}, 0x20}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0xb, 0xf4, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x1c, [], r7, 0xffffffffffffffff, 0x4, 0x3}, 0x3c)

03:20:16 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:16 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:16 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:16 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:16 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[  415.575550][ T9783] XFS (loop5): Invalid superblock magic number
03:20:16 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:16 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:18 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:18 executing program 1:
r0 = getpid()
syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000340)=@nat={'n\xe7\xee\x966\x00\x00\x00\x00\xa2V\xef\x9e\xa2\xc5{|\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04', 0x19, 0x0, 0x90, [0x20000000, 0x0, 0x0, 0x20000030, 0x20000060], 0x0, 0x0, &(0x7f0000000000)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x5)
wait4(0x0, 0x0, 0x0, 0x0)

03:20:18 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:18 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:18 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:19 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:19 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:19 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:19 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  418.093996][   T26] audit: type=1800 audit(1574565619.195:50): pid=9832 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=16657 res=0
[  418.651978][ T9856] XFS (loop5): Invalid superblock magic number
03:20:19 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:19 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:19 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:20 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  419.405484][ T9885] XFS (loop0): Invalid superblock magic number
03:20:21 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_SET_STATUS64(r0, 0x4c03, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c69ab0d058b1b678397214eec9ff0d0cc8773ebb2cfd89b0252317a845d3df759d280ad530ff887d31ed8f9bf42b889fadb99a5defc79bd6b2023939c49224f", "e9af2deca424f1d69c3cef2acc10d15cae4da1bf9b1c974dd2de2185a2ae81bbcb58ebaa0b202596b0b84f59798e42bca13b7dd7218fcb5e75d1d7299ff17955", "804c0e6791e9da0c25402952a8dd77a5bf08050500"})

03:20:21 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:21 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:21 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:21 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:22 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:22 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:22 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:22 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:22 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = fcntl$dupfd(r2, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)

03:20:22 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[  421.420246][ T9915] XFS (loop5): Invalid superblock magic number
03:20:22 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:22 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000f21301ce646ba1a345"], 0x1}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  421.582657][ T9939] ERROR: Domain '<kernel> /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.2 /root/syzkaller-testdir491979232/syzkaller.0umfJw/41/file0' not defined.
[  421.685066][   T26] audit: type=1800 audit(1574565622.795:51): pid=9939 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=16641 res=0
03:20:23 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:23 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:23 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:23 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x2, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000680)=@ethernet={0x0, @dev}, &(0x7f0000000700)=0x80)
sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
accept$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @remote}, &(0x7f0000000640)=0x10)
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x4defb3b0cfd68788, 0xffffffffffffffff)
socket$inet(0x10, 0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000000c0)="04"}, 0x20)

03:20:23 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:23 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  422.287229][   T26] audit: type=1800 audit(1574565623.395:52): pid=9962 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=16821 res=0
03:20:23 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:23 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:23 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x2, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000680)=@ethernet={0x0, @dev}, &(0x7f0000000700)=0x80)
sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
accept$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @remote}, &(0x7f0000000640)=0x10)
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x4defb3b0cfd68788, 0xffffffffffffffff)
socket$inet(0x10, 0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000000c0)="04"}, 0x20)

03:20:23 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:23 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:24 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x64, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, 0x84)

[  422.999898][T10003] ptrace attach of "/root/syz-executor.2"[9997] was attempted by "/root/syz-executor.2"[10003]
03:20:24 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  423.057681][T10000] XFS (loop0): Invalid superblock magic number
[  423.064510][   T26] audit: type=1800 audit(1574565624.165:53): pid=10002 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16841 res=0
03:20:24 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:24 executing program 1:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48)
listen(0xffffffffffffffff, 0x0)

03:20:24 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:26 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:26 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:26 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:26 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:26 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x10bd02, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x6609, 0x0)
r1 = gettid()
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_bp={0x0}, 0x1420, 0x0, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={<r2=>r1, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0)
perf_event_open(0x0, r2, 0xffffffffffffffff, r4, 0x2)
sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x2}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000280)="b3fbc13bb5aa7cd57e9c35b3c23371b4d65c5cbfce422a9eb47adbfb23c98ea648567169ec2c4a854c", 0x29}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000000540)="73fdc7feda3459c49b6d776df20f2ffdccda0c0a9be06dc1f8cc6a1d30a8", 0x1e}], 0x3, &(0x7f0000001640)="b42ec1f7bcc739166b5fa62cc98f72f567004cc8e131dce55be9a6a393b47ed129fcf7f84ab790e9a2ea0489d65424074ef16dc341bbbfeb22ebdece24d27d52d6b7273fe1df789b770c8e898d2593fa0ec287549ac249b2f71c38ee99b3d10dcc19ad61a670994c0e6e2ac6dc9766b4abea78c7abb4efe59cc24f9919f64758c635f44a634a41e507f7b7deb756bb319e8cfc51b5b5a0a976c161d338756c1345875158211ae3fd3113ba1d1992961a71f512e155e884c102a293f54768ba0b2dfd285cbd236a1439c3bdb4b85d0336847d4c116dcab0c88fc4b497ede00e0676f30e88ea9d1d3bff89ba3e3f", 0xed, 0x8040084}, 0x80)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000000)='cpuset.sched_load_balance\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f00000003c0), 0x12)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000001740)=r4, 0x4)
r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, r7, 0x0, 0xffffff6d, &(0x7f0000000100)='/dev/net/tun\x00'}, 0x30)
close(r7)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000002c0)="28bd877b96a2df27907bae2e2934b8e0bca70b5291f0cee3949df9a0e95f71cec2c8d0f0adc2e594e44f9b3975e74eb5dea96aa6799bd1fcf864c40d3e8f6554ef6bab95d6fa02b8cd33934814940701241a5067f7c9ce561ea31104b113207240c61d80961767c15b14fb232f6063d130e535bea8be2e29da2be7fe9e41c0920c77a99bad0e94cc762af162766806aa6d0e770d9324", &(0x7f0000000200)=""/122, 0x8}, 0x20)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x9, 0x0, 0x2, 0x40, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x2, 0x101, 0x6, 0x1000, 0x0, 0x800}, 0x0, 0xa, r0, 0xa)
socket$kcm(0x29, 0x5, 0x0)
write$cgroup_int(r6, &(0x7f0000000080)=0x6, 0x12)

03:20:26 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:26 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:26 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:26 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:26 executing program 1:
msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000003c0)=""/122)

03:20:26 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:26 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:29 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:29 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:29 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0xff)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071")
syz_mount_image$minix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f00000001c0)="0cebaa4f13e32117b192563d31d771fe87273ae001354ecc68a16ca90153b14f6fda1542edf7502ab1e7335b574c523ca344998a02dba7b42dc9fecf8f74c186f52f8a7830b9eacfee4a25385caec7328a4137a7dc24470f3786cb57ab1cc8740fe688e3d2c763ee1aa109d150ca943bf1b7cae62066d079dd40375c57abd3f15cb3590c442c6300005187ffead59ddb116aad3786c43a9954add1f9929c736d4c15a2ef0c0d352784e24797af1ead42e45a2100ce579c4f0888c41ae4a2604d0a358bf64ed2681a27f048363194853c0e626ae86648b531d941cf1abadebfe4fe07777548a39f35f770207b", 0xec, 0x8}], 0x80000, 0x0)

03:20:29 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:29 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:29 executing program 1:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[  428.880762][T10121] XFS (loop0): Invalid superblock magic number
[  428.900842][T10123] XFS (loop5): Invalid superblock magic number
03:20:30 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:30 executing program 2:
r0 = gettid()
write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
close(0xffffffffffffffff)
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:30 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:30 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:30 executing program 2:
r0 = gettid()
write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
close(0xffffffffffffffff)
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:30 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  429.780341][T10172] XFS (loop5): Invalid superblock magic number
03:20:32 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:32 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:32 executing program 2:
r0 = gettid()
write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
close(0xffffffffffffffff)
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:32 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:32 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:33 executing program 1:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:33 executing program 2:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
close(r0)
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)

03:20:33 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:33 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:33 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:33 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:33 executing program 2:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
close(r0)
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)

03:20:33 executing program 2:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
close(r0)
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)

03:20:33 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  432.407583][   T26] audit: type=1800 audit(1574565633.515:54): pid=10225 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="file0" dev="sda1" ino=16889 res=0
03:20:33 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  432.721844][   T26] audit: type=1800 audit(1574565633.815:55): pid=10242 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=16906 res=0
03:20:33 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:35 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:35 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:35 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:35 executing program 1:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:35 executing program 2:
r0 = gettid()
r1 = creat(0x0, 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[  434.981209][T10277] XFS (loop0): Invalid superblock magic number
03:20:36 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:36 executing program 2:
r0 = gettid()
r1 = creat(0x0, 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:36 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:36 executing program 2:
r0 = gettid()
r1 = creat(0x0, 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:36 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:36 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:36 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[  435.367785][T10301] ptrace attach of "/root/syz-executor.4"[10298] was attempted by "/root/syz-executor.4"[10301]
03:20:38 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:38 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:38 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:38 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:38 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:38 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:39 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[  438.089830][T10329] ptrace attach of "/root/syz-executor.4"[10325] was attempted by "/root/syz-executor.4"[10329]
03:20:39 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:39 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[  438.336705][T10346] XFS (loop0): Invalid superblock magic number
[  438.340935][   T26] audit: type=1800 audit(1574565639.445:56): pid=10336 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16918 res=0
[  438.411952][T10333] XFS (loop1): Invalid superblock magic number
[  438.448218][T10324] XFS (loop5): Invalid superblock magic number
03:20:39 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:39 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:39 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:40 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:40 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:40 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:40 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:40 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[  439.602002][T10419] XFS (loop5): Invalid superblock magic number
[  439.714436][T10421] XFS (loop0): Invalid superblock magic number
03:20:41 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  440.450151][T10452] XFS (loop1): Invalid superblock magic number
03:20:42 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:42 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:42 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:42 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:42 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:42 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:42 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:42 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:43 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:43 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:43 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:43 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:43 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:43 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  442.943133][T10548] XFS (loop1): Invalid superblock magic number
[  443.135094][T10552] XFS (loop5): Invalid superblock magic number
[  443.158287][T10535] XFS (loop0): Invalid superblock magic number
03:20:44 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:44 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:44 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:44 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:44 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:46 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:46 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
dup2(r3, 0xffffffffffffffff)
ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  445.150008][T10612] XFS (loop5): Invalid superblock magic number
03:20:46 executing program 4:
r0 = gettid()
write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
close(0xffffffffffffffff)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:46 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:46 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:46 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:46 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:46 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
dup2(r3, 0xffffffffffffffff)
ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:46 executing program 4:
r0 = gettid()
write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
close(0xffffffffffffffff)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:46 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
dup2(r3, 0xffffffffffffffff)
ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:46 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:46 executing program 1:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[  446.017550][T10659] XFS (loop0): Invalid superblock magic number
[  446.272954][T10676] XFS (loop5): Invalid superblock magic number
03:20:47 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:47 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(0xffffffffffffffff, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:47 executing program 1:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[  447.116515][T10704] XFS (loop0): Invalid superblock magic number
03:20:49 executing program 3:
r0 = gettid()
write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
close(0xffffffffffffffff)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:49 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(0xffffffffffffffff, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:49 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
dup2(r3, 0xffffffffffffffff)
ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:49 executing program 4:
r0 = gettid()
write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
close(0xffffffffffffffff)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:50 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:50 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(0xffffffffffffffff, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:50 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
dup2(r3, 0xffffffffffffffff)
ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  449.276625][T10752] XFS (loop5): Invalid superblock magic number
[  449.370070][T10761] XFS (loop0): Invalid superblock magic number
03:20:50 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
socket(0x10, 0x0, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:50 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
socket(0x10, 0x0, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:50 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
dup2(r3, 0xffffffffffffffff)
ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:51 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
socket(0x10, 0x0, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:51 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
socket(0x10, 0x0, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  450.201848][T10795] XFS (loop0): Invalid superblock magic number
[  450.233778][T10805] XFS (loop5): Invalid superblock magic number
03:20:53 executing program 3:
r0 = gettid()
write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
close(0xffffffffffffffff)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:53 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(0xffffffffffffffff, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:53 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(0xffffffffffffffff, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:53 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:53 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:53 executing program 4:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
close(r0)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)

03:20:53 executing program 3:
r0 = gettid()
write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
close(0xffffffffffffffff)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:53 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(0xffffffffffffffff, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:53 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:53 executing program 4:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
close(r0)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)

[  452.296133][   T26] audit: type=1800 audit(1574565653.405:57): pid=10837 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17006 res=0
03:20:53 executing program 3:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
close(r0)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)

[  452.576425][T10844] cgroup: fork rejected by pids controller in /syz5
03:20:53 executing program 3:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
close(r0)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)

[  452.731041][T10865] XFS (loop5): Invalid superblock magic number
[  452.840324][T10916] XFS (loop0): Invalid superblock magic number
[  452.896617][T10854] XFS (loop1): Invalid superblock magic number
03:20:54 executing program 3:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
close(r0)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)

03:20:54 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(0xffffffffffffffff, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:54 executing program 3:
r0 = gettid()
r1 = creat(0x0, 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:54 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(0xffffffffffffffff, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  454.121747][T11019] XFS (loop1): Invalid superblock magic number
[  454.471314][T11031] XFS (loop0): Invalid superblock magic number
03:20:56 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:56 executing program 4:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
close(r0)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)

03:20:56 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(0xffffffffffffffff, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:56 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
socket(0x10, 0x0, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  455.427310][   T26] audit: type=1800 audit(1574565656.525:58): pid=11050 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17039 res=0
[  455.791088][T11062] XFS (loop0): Invalid superblock magic number
[  455.931302][T11068] XFS (loop1): Invalid superblock magic number
03:20:57 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:57 executing program 4:
r0 = gettid()
r1 = creat(0x0, 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:57 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:57 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
socket(0x10, 0x0, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:57 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
socket(0x10, 0x0, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:57 executing program 4:
r0 = gettid()
r1 = creat(0x0, 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:57 executing program 3:
r0 = gettid()
r1 = creat(0x0, 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:57 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
socket(0x10, 0x0, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:58 executing program 3:
r0 = gettid()
r1 = creat(0x0, 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[  457.118987][T11108] XFS (loop1): Invalid superblock magic number
03:20:58 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:58 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:58 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:58 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:20:58 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:59 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:59 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:20:59 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[  458.040657][T11254] XFS (loop0): Invalid superblock magic number
[  458.670424][T11294] XFS (loop1): Invalid superblock magic number
03:21:01 executing program 4:
r0 = gettid()
r1 = creat(0x0, 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:01 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:01 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:01 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:01 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:01 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:01 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[  460.525227][T11333] XFS (loop0): Invalid superblock magic number
03:21:01 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:01 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:02 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:02 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:02 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:02 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:02 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

03:21:02 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  461.839280][T11482] XFS (loop0): Invalid superblock magic number
03:21:04 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:04 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

03:21:04 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:04 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:04 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:04 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[  463.860740][T11531] XFS (loop0): Invalid superblock magic number
[  463.899589][T11533] ptrace attach of "/root/syz-executor.2"[11532] was attempted by "/root/syz-executor.2"[11533]
03:21:05 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:05 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:05 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

03:21:05 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:05 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:05 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:05 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  464.732263][T11664] XFS (loop1): Invalid superblock magic number
03:21:05 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:06 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  465.425342][T11691] cgroup: fork rejected by pids controller in /syz0
03:21:07 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:07 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:07 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:07 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:07 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:07 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:07 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:07 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:07 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:07 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:08 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:08 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:08 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:10 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:10 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:10 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:10 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:10 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:11 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:11 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:11 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:11 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:11 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  470.487884][T12702] XFS (loop1): Invalid superblock magic number
03:21:11 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:12 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:13 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:13 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:13 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:13 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:13 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:13 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:13 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:14 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:14 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:14 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:15 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:15 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:16 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, &(0x7f00000001c0))
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:16 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:16 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:16 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:17 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:17 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:17 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:17 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:17 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:17 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:18 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:18 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
socket(0xa, 0x1, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:20 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, &(0x7f00000001c0))
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:20 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:20 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:20 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:20 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:20 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
socket(0xa, 0x1, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:20 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:20 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:20 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
socket(0xa, 0x1, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:20 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:20 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:21 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
socket(0xa, 0x1, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:23 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, &(0x7f00000001c0))
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:23 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
socket(0xa, 0x1, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:23 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:23 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:23 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:23 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:23 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:23 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
socket(0xa, 0x1, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:23 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:23 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:24 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:24 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:26 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:26 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
socket(0xa, 0x1, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:26 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:26 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:26 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:26 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
socket(0xa, 0x1, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:26 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:26 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:26 executing program 3:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[  485.797079][T15779] ptrace attach of "/root/syz-executor.4"[15776] was attempted by "/root/syz-executor.4"[15779]
03:21:27 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:27 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:27 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

[  486.334698][T15973] ptrace attach of "/root/syz-executor.4"[15941] was attempted by "/root/syz-executor.4"[15973]
03:21:29 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, r0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0xca8, 0x4, 0x400}, 0x10)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:29 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
close(0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9}, &(0x7f00000001c0)=0x90)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
close(r1)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfd, 0x484801)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:21:29 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:29 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
socket(0xa, 0x1, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:29 executing program 5:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r5 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r5, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

03:21:29 executing program 1:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r1, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
socket(0xa, 0x1, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  488.441071][T16115] ==================================================================
[  488.449240][T16115] BUG: KCSAN: data-race in tomoyo_update_stat / tomoyo_update_stat
[  488.457120][T16115] 
[  488.459486][T16115] write to 0xffffffff86142100 of 8 bytes by task 16191 on cpu 1:
[  488.467219][T16115]  tomoyo_update_stat+0x5c/0x70
[  488.472079][T16115]  tomoyo_assign_domain+0x566/0x5b0
[  488.477281][T16115]  tomoyo_find_next_domain+0x3f8/0x11f6
[  488.482827][T16115]  tomoyo_bprm_check_security+0xbc/0x100
[  488.488465][T16115]  security_bprm_check+0x5d/0xa0
[  488.493406][T16115]  search_binary_handler+0x56/0x420
[  488.498608][T16115]  __do_execve_file.isra.0+0xb76/0x11d0
[  488.504167][T16115]  __x64_sys_execve+0x62/0x80
[  488.508851][T16115]  do_syscall_64+0xcc/0x370
[  488.513388][T16115]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  488.519270][T16115] 
[  488.521604][T16115] write to 0xffffffff86142100 of 8 bytes by task 16115 on cpu 0:
[  488.529321][T16115]  tomoyo_update_stat+0x5c/0x70
[  488.534181][T16115]  tomoyo_assign_domain+0x566/0x5b0
[  488.539389][T16115]  tomoyo_find_next_domain+0x3f8/0x11f6
[  488.544936][T16115]  tomoyo_bprm_check_security+0xbc/0x100
[  488.550628][T16115]  security_bprm_check+0x5d/0xa0
[  488.555567][T16115]  search_binary_handler+0x56/0x420
[  488.560768][T16115]  __do_execve_file.isra.0+0xb76/0x11d0
[  488.566320][T16115]  __x64_sys_execve+0x62/0x80
[  488.571006][T16115]  do_syscall_64+0xcc/0x370
[  488.575519][T16115]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  488.581415][T16115] 
[  488.583737][T16115] Reported by Kernel Concurrency Sanitizer on:
03:21:29 executing program 0:
mq_open(&(0x7f00000010c0)='eth0\x00\xc2\xa8\xe1\xc7%\xe3M\xa9\xa5\xdf\x9e6\xe4\xff\x06Tj\xd94\x8f\xc0\xff\t\x9er\xacVu\x11Q\xa5\xc2\xd7\xc6n\xef\x1f\x92m7S\xd1\x0fO\xb0\xf0\x15h\b\x01\xeae\xe1E\xcd\x8c\xc4\xb6\xe5b\x100\xde\x93\xd0\xcfd7\x91+\xd4i\x90\xe6\x8b\x8e7\x11P\r\x1dY\x1e\x92\xfe&\xf0\xd8t\xc2B:?\xa9gj\xcc\x1a\xf2y8C\xadu{\xf3jg[\xc9\x1f\xcd(\xf0\x91/\x97\xbeR\xec0\n\xb8T\x185\xa3\x9cJ\x18}\x16dIJ\xcd\xda\xad\xb3\x8bJM\xf3\xfd\tTxQ\xb5!7\xd3\xc8d\xa1:\xda^\xff\xeag\xeaT\a\xcf\xf5\xa1\x8e\xf8\xc1\x15H\xb0\xa9\xe7H\x99W=F\x8b=\x93\x926\xf6~S0\xfd\xc7M}.\x18\xc1\xe1*\x91\\\x8cVrV5\x89q\x1eA\x00\xc7%IwX\xac\xc8\xc4\x7f&$\x8e\xb3E', 0x80, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0xffffffbd, 0x0, &(0x7f0000001040))
times(&(0x7f0000001080))
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003740)={0x14, 0x19, 0xfffffffffffffffd, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
clone(0x30020100, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local, 0x0, 0x3}}, 0xe8)
syz_emit_ethernet(0x4a, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="48a6148d607f46a1362d03faf134757b000731cbfb2ce22b59a1e647a9f188ef87616943dd9f"], 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f0000005000)=[{{&(0x7f0000000dc0), 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6, 0xe426d0c67a4efbc8, 0x0, [{}, {}]}]}}}], 0x20}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0x1f, @remote, 0xb836}, @in6={0xa, 0x4e22, 0x7f, @dev={0xfe, 0x80, [], 0x11}, 0xe2d}, @in={0x2, 0x4e24, @broadcast}], 0x48)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
dup2(r2, r3)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000001000)={0x1f, 0x3ff})
r4 = socket$inet6(0xa, 0x3, 0x9)
recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRESDEC=r4, @ANYRES32=0x0], 0x5}}, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
socket(0xa, 0x1, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1e1, &(0x7f0000000080)=[{&(0x7f0000000100)="3d72201800000000b12ac38a920ca866d9ee2c7f86d9e74ed8d9c6bba94c2aae0795e0d15336c61beec315a82354e62a2bc91b9f4fa6e6662aafd7478ac2", 0x3e, 0x5}], 0x40, 0xfffffffffffffffe)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)

[  488.589900][T16115] CPU: 0 PID: 16115 Comm: syz-executor.4 Not tainted 5.4.0-rc7+ #0
[  488.597782][T16115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  488.607835][T16115] ==================================================================
[  488.615916][T16115] Kernel panic - not syncing: panic_on_warn set ...
[  488.622527][T16115] CPU: 0 PID: 16115 Comm: syz-executor.4 Not tainted 5.4.0-rc7+ #0
[  488.630416][T16115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  488.640472][T16115] Call Trace:
[  488.643778][T16115]  dump_stack+0x11d/0x181
[  488.648122][T16115]  panic+0x210/0x640
[  488.652023][T16115]  ? vprintk_func+0x8d/0x140
[  488.656632][T16115]  kcsan_report.cold+0xc/0xd
[  488.661239][T16115]  kcsan_setup_watchpoint+0x3fe/0x460
[  488.666625][T16115]  __tsan_unaligned_write8+0xc4/0x100
[  488.672029][T16115]  tomoyo_update_stat+0x5c/0x70
[  488.676904][T16115]  tomoyo_assign_domain+0x566/0x5b0
[  488.682142][T16115]  tomoyo_find_next_domain+0x3f8/0x11f6
[  488.687707][T16115]  tomoyo_bprm_check_security+0xbc/0x100
[  488.693347][T16115]  security_bprm_check+0x5d/0xa0
[  488.698298][T16115]  search_binary_handler+0x56/0x420
[  488.703512][T16115]  __do_execve_file.isra.0+0xb76/0x11d0
[  488.709078][T16115]  __x64_sys_execve+0x62/0x80
[  488.713773][T16115]  do_syscall_64+0xcc/0x370
[  488.718299][T16115]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  488.724201][T16115] RIP: 0033:0x45a639
[  488.728110][T16115] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  488.747839][T16115] RSP: 002b:00007ffbfc9a8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  488.756261][T16115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a639
[  488.764235][T16115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180
[  488.772215][T16115] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  488.780197][T16115] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffbfc9a96d4
[  488.788179][T16115] R13: 00000000004c0f8d R14: 00000000004d3d30 R15: 00000000ffffffff
[  488.797704][T16115] Kernel Offset: disabled
[  488.802028][T16115] Rebooting in 86400 seconds..