df55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) sendfile(r4, r6, &(0x7f0000002c00), 0x2) [ 1049.526347][T14108] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1049.532998][T13807] XFS (loop4): Invalid superblock magic number 08:41:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 08:41:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) [ 1049.835988][T14096] XFS (loop2): Invalid superblock magic number 08:41:30 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000013000/0x1000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f00000001c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)=0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) shmctl$IPC_SET(r0, 0x1, &(0x7f00000003c0)={{0x8, r1, r2, r3, r4, 0x20, 0x7577}, 0x1, 0x800, 0x9, 0x7fff, r5, r6, 0x8}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r8, 0x4070aea0, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x1ff}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r9, 0xae80, 0x0) 08:41:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) 08:41:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) 08:41:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 08:41:30 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000013000/0x1000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f00000001c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)=0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) shmctl$IPC_SET(r0, 0x1, &(0x7f00000003c0)={{0x8, r1, r2, r3, r4, 0x20, 0x7577}, 0x1, 0x800, 0x9, 0x7fff, r5, r6, 0x8}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r8, 0x4070aea0, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x1ff}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r9, 0xae80, 0x0) 08:41:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0x0, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1050.505822][T14850] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x2000000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) [ 1050.816894][T14746] XFS (loop4): Invalid superblock magic number 08:41:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0xff}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f00000001c0)=0xf55, 0x4) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x10000000000}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1051.080074][T14772] XFS (loop2): Invalid superblock magic number 08:41:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x2000000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 08:41:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) [ 1051.482296][T15620] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1051.496965][T15448] kvm: pic: single mode not supported [ 1051.496978][T15448] pic_ioport_write: 3 callbacks suppressed [ 1051.496984][T15448] kvm: pic: level sensitive irq not supported [ 1051.497268][T15448] kvm: pic: single mode not supported 08:41:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0xff}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f00000001c0)=0xf55, 0x4) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x10000000000}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1051.567576][T15448] kvm: pic: single mode not supported [ 1051.567582][T15448] kvm: pic: level sensitive irq not supported [ 1051.575798][T15448] kvm: pic: level sensitive irq not supported 08:41:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0x0, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) [ 1051.621855][T15448] kvm: pic: level sensitive irq not supported [ 1051.697529][T15485] XFS (loop4): Invalid superblock magic number 08:41:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x1ff}]}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0x10001, 0x0, [0xc1d, 0x0, 0x5, 0x5, 0x7, 0x1f, 0x7fffffff, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1051.766412][T15650] kvm: pic: single mode not supported [ 1051.766419][T15650] kvm: pic: level sensitive irq not supported [ 1051.783754][T15650] kvm: pic: level sensitive irq not supported [ 1051.784031][T15650] kvm: pic: level sensitive irq not supported [ 1051.791381][T15650] kvm: pic: single mode not supported [ 1051.804575][T15650] kvm: pic: single mode not supported [ 1051.804581][T15650] kvm: pic: level sensitive irq not supported [ 1051.825704][T15650] kvm: pic: level sensitive irq not supported [ 1051.825980][T15650] kvm: pic: level sensitive irq not supported [ 1051.974783][T15727] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 08:41:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 08:41:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x1ff}]}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0x10001, 0x0, [0xc1d, 0x0, 0x5, 0x5, 0x7, 0x1f, 0x7fffffff, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) [ 1052.355248][T15670] XFS (loop2): Invalid superblock magic number [ 1052.467408][T16245] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 08:41:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 08:41:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x1}, 0xffffffffffffff02) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) r6 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r6) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNGETFILTER(r7, 0x801054db, &(0x7f0000000080)=""/30) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0x17b) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:41:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0x0, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1052.705102][T16056] XFS (loop4): Invalid superblock magic number [ 1052.769358][T16338] kvm: pic: single mode not supported [ 1052.769625][T16338] kvm: pic: single mode not supported [ 1052.777881][T16338] kvm: pic: single mode not supported [ 1052.778590][T16338] kvm: pic: single mode not supported 08:41:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 08:41:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1053.080418][T16605] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1053.218603][T16556] XFS (loop2): Invalid superblock magic number 08:41:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) 08:41:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) 08:41:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x1}, 0xffffffffffffff02) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) r6 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r6) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNGETFILTER(r7, 0x801054db, &(0x7f0000000080)=""/30) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0x17b) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:41:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) [ 1053.545366][T16899] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 08:41:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000040)={0x0, "35b0bccd95117b9c02d8015ba27e093aa5df90f5d9ebf1aa9923f75dd7f158e7"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x99, 0x0, 0x0, 0xfffffffffffffe67) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3, 0x200) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1053.960652][T16884] XFS (loop4): Invalid superblock magic number [ 1054.081356][T17226] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) 08:41:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000040)={0x0, "35b0bccd95117b9c02d8015ba27e093aa5df90f5d9ebf1aa9923f75dd7f158e7"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x99, 0x0, 0x0, 0xfffffffffffffe67) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3, 0x200) ioctl$KVM_RUN(r3, 0xae80, 0x0) 08:41:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 1054.422248][T17218] XFS (loop2): Invalid superblock magic number 08:41:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) 08:41:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x1}, 0xffffffffffffff02) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) r6 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r6) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$TUNGETFILTER(r7, 0x801054db, &(0x7f0000000080)=""/30) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0x17b) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:41:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) [ 1054.766541][T17665] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) 08:41:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) 08:41:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1055.254650][T17596] XFS (loop4): Invalid superblock magic number [ 1055.278820][T17903] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) [ 1055.564431][T17778] XFS (loop2): Invalid superblock magic number 08:41:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r6 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r7 = gettid() process_vm_readv(r7, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r7, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r3) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r5, &(0x7f0000002c00), 0x2) 08:41:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 08:41:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) 08:41:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 08:41:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) [ 1056.579982][T18653] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1056.634984][T18660] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) 08:41:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) [ 1056.896001][T18644] XFS (loop4): Invalid superblock magic number [ 1056.993278][T18640] XFS (loop2): Invalid superblock magic number 08:41:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r6 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r7 = gettid() process_vm_readv(r7, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r7, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r3) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r5, &(0x7f0000002c00), 0x2) 08:41:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 08:41:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00'}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1057.728710][T19377] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1057.761911][T19430] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 1058.052511][T19327] XFS (loop2): Invalid superblock magic number [ 1058.344387][T19330] XFS (loop4): Invalid superblock magic number 08:41:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r6 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r7 = gettid() process_vm_readv(r7, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r7, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r3) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r5, &(0x7f0000002c00), 0x2) 08:41:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) write$P9_RFSYNC(r2, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) 08:41:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00'}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00'}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r6 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r7 = gettid() process_vm_readv(r7, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r7, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r3) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r5, &(0x7f0000002c00), 0x2) 08:41:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xffff, 0x5, 0x2}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)={0xfffffffffffffffd}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)) [ 1059.108208][T20141] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r6 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r7 = gettid() process_vm_readv(r7, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r7, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r3) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r5, &(0x7f0000002c00), 0x2) [ 1059.242232][T20189] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1059.373376][T20012] XFS (loop2): Invalid superblock magic number [ 1059.448190][T20161] XFS (loop4): Invalid superblock magic number 08:41:40 executing program 0: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1}) 08:41:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x60180, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x400, @ipv4={[], [], @local}, 0x101}, @in6={0xa, 0x4e20, 0x9, @loopback, 0x4}, @in6={0xa, 0x4e22, 0x0, @mcast1, 0x7}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0xbb8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1ff}, @in={0x2, 0x4e24, @empty}], 0x90) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) [ 1059.650626][T20485] usb usb3: check_ctrlrecip: process 20485 (syz-executor.0) requesting ep 01 but needs 81 [ 1059.725149][T20485] usb usb3: usbfs: process 20485 (syz-executor.0) did not claim interface 0 before use 08:41:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000}]}) 08:41:40 executing program 0: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1}) 08:41:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00'}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpid() sched_setparam(r2, &(0x7f0000000080)=0x10001) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) 08:41:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r6, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) [ 1060.019418][T20632] usb usb3: check_ctrlrecip: process 20632 (syz-executor.0) requesting ep 01 but needs 81 [ 1060.039260][T20632] usb usb3: usbfs: process 20632 (syz-executor.0) did not claim interface 0 before use 08:41:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r2, 0xae80, 0x48000000) 08:41:40 executing program 0: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1}) 08:41:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r6 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r7 = gettid() process_vm_readv(r7, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r7, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r3) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r5, &(0x7f0000002c00), 0x2) [ 1060.287737][T20732] usb usb3: check_ctrlrecip: process 20732 (syz-executor.0) requesting ep 01 but needs 81 [ 1060.315870][T20739] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x101003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000003000000040100000000000003000000000000000000000000000000060000000000000011e6000000000000009665187200000000ff0e0000000000000900000000000040fbffffff000000e4010000000000000008000000000000000500000000000000"]) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x80000000}) chmod(&(0x7f0000000100)='./file0\x00', 0x100) [ 1060.353786][T20732] usb usb3: usbfs: process 20732 (syz-executor.0) did not claim interface 0 before use 08:41:41 executing program 0: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1}) [ 1060.465582][T20805] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r2, 0xae80, 0x48000000) 08:41:41 executing program 0: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1}) [ 1060.640155][T20644] XFS (loop2): Invalid superblock magic number [ 1060.724335][T20742] XFS (loop4): Invalid superblock magic number 08:41:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) r3 = geteuid() getresuid(&(0x7f0000000880)=0x0, &(0x7f00000008c0), &(0x7f0000000900)) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x9, &(0x7f0000000780)=[{&(0x7f00000000c0)="48d5a0ad549f3cfd21a9e1daa2137074b7168c8f4a2d", 0x16, 0x2}, {&(0x7f0000000240)="55d995fcf39584fcdc1be9c61f5bea6d92c47d0e225792ea337d0415a255082dd4b1fb56fd1cce9b2a4ee04759896e4e00c755c7e04c11e672b87b4fc59fc1e812d145f9ff9399f46ed0de7d5531af56c311b73e21e5008800573721655b64e484a1d69cc41c59b2a2ae67d589a137e23e5eceedd376d8f98d912a13a6a4d6b098413608068d5ef8b82672b5fa188a9ef207021bd467", 0x96, 0x1}, {&(0x7f0000000300)="5659fe90f8096f7ed7035cd64d6d75a0d478326a54139009080cf1431246d9ee95a9580fcf306fad82778759bd58a8e51d6fe5c47bb488329d7585d95a8137e44338cfc2d3fdc02592cc62dcb64784d4ae2ff52c5dc477033f400d2e04a6102906bdba105b0a78dc7235ce2b2d6fc850eadf3667f3b6b44558addd266ecc8d316753c09abf6378da47a348d6eca3a98a21f0534c99b5798fc6f6e44bd6ae97f2eada768da9c5295d68819ae9fbc5494c2d18f88a7eee855d6b7bdb86d042223aded651b8ad55cccd681c0361748bf8c8c5f7677cf9bee516c19df160408b624bea4d5b9da8fa16fb77", 0xe9, 0x5000000000000000}, {&(0x7f0000000400)="33467b0cd6865898d377492f3f43440cc542628630df4e579b098d48b71e83b587bbbb832a349e90012f36b9e0cc67613302829cbc9344df8010a56e8173e7071d554b1e3dfea2fe648bdc714e2319042b8c4479a7791840ebf1a4fa5ca9ecfb9527bd731213887b841cd01f06e35a500810aa3fa74904e06200d2583f40035a45c3cd447648c0dbc4d7f6deafbcd2cb6d17082cc12417bdd1d8fd57e86bec39d7d93c28c2ca010f5ddc1719d2", 0xad, 0x9}, {&(0x7f00000004c0)="8a193c1a952048f75778cd8cede70260dbb6edb3aea46927f19fa3c36ed1207ae11be16758f66f97617e244c681635bb77245f534f81668a2d4ed1f2cc19774fbc02e55dc8404188e4ebba384e22f26fda630d5e1c5e267b9fe865e7bf058b750c69204d07a456c68470f29acfd6faa1a815e0d757f240aead1282683929915848478d5032af970b43820449a092d1706f326c3d6d113bb815254a989f5e8b5425ca5c9ab78bfe916c66adb7f6338f5f4e0ffffd52b4a347e4b302ea8b8d312cf2ea16e451d18a46bfdb5c8cbb5c243b48b055f6247446ab47d4e95b6a15f33cf1", 0xe1, 0x81}, {&(0x7f00000001c0), 0x0, 0x5}, {&(0x7f00000005c0)="5e999d962c5a353b2ba4bbfcaad7fc4d549664ec14249bed80f9d57452a4dbe4ca594a4999c759215d36879d49f17b3c4eebbbdedc133178dc7ed92a6188d4bf39c8bf8ec6c2fdc8c9d2e4e72779ae95bec7a72a3c240f144f3e243f65ce", 0x5e, 0x9}, {&(0x7f0000000640)="eed87acec630c6f7e81ccd43e4a847182470c8cc015e713ef310d377e5fbd4d7e67900634644537c2bc66e1032e339cc7d3976720aeae432e7766e09e57fb1733af9572dcf5fe7488ce86ce7dc12e899eb855c15d27dde1b6a62db7d63301200ba3dd4b07272f959b9bf3f9c669a07dffc5b6667688aa547115b60907a1813888b6b12273c8f8f3ef9e0ce8d90d607cae3c81e2fdb06b1b634303a94f725d4", 0x9f, 0xffffffffffffffc1}, {&(0x7f0000000700)="740a769f858e3b26b6de282739e3b91ee90fd6d01a81bd332a7f47d101e51f914c24e9aabc4a1cf2069924b87c4a6a8d68c3fd29b093d5bbc3ee4aa8ebf1338e4af9d7f699978b1daa69b403a9be23503c7997ce25844155f6daf4963305a347580a", 0x62, 0x800}], 0x0, &(0x7f0000000940)={[{@quota='quota'}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uid={'uid', 0x3d, r3}}, {@integrity='integrity'}], [{@permit_directio='permit_directio'}, {@fowner_lt={'fowner<', r4}}, {@subj_role={'subj_role'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '*+\''}}, {@subj_type={'subj_type'}}, {@obj_user={'obj_user', 0x3d, 'nodev'}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:41 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000200)) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x7fff, 0x285}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)) 08:41:41 executing program 0: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1}) 08:41:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r6 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r7 = gettid() process_vm_readv(r7, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r7, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r3) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r5, &(0x7f0000002c00), 0x2) 08:41:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r6, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xfffffffffffffffc, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) 08:41:41 executing program 0: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1}) 08:41:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) r3 = geteuid() getresuid(&(0x7f0000000880)=0x0, &(0x7f00000008c0), &(0x7f0000000900)) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x9, &(0x7f0000000780)=[{&(0x7f00000000c0)="48d5a0ad549f3cfd21a9e1daa2137074b7168c8f4a2d", 0x16, 0x2}, {&(0x7f0000000240)="55d995fcf39584fcdc1be9c61f5bea6d92c47d0e225792ea337d0415a255082dd4b1fb56fd1cce9b2a4ee04759896e4e00c755c7e04c11e672b87b4fc59fc1e812d145f9ff9399f46ed0de7d5531af56c311b73e21e5008800573721655b64e484a1d69cc41c59b2a2ae67d589a137e23e5eceedd376d8f98d912a13a6a4d6b098413608068d5ef8b82672b5fa188a9ef207021bd467", 0x96, 0x1}, {&(0x7f0000000300)="5659fe90f8096f7ed7035cd64d6d75a0d478326a54139009080cf1431246d9ee95a9580fcf306fad82778759bd58a8e51d6fe5c47bb488329d7585d95a8137e44338cfc2d3fdc02592cc62dcb64784d4ae2ff52c5dc477033f400d2e04a6102906bdba105b0a78dc7235ce2b2d6fc850eadf3667f3b6b44558addd266ecc8d316753c09abf6378da47a348d6eca3a98a21f0534c99b5798fc6f6e44bd6ae97f2eada768da9c5295d68819ae9fbc5494c2d18f88a7eee855d6b7bdb86d042223aded651b8ad55cccd681c0361748bf8c8c5f7677cf9bee516c19df160408b624bea4d5b9da8fa16fb77", 0xe9, 0x5000000000000000}, {&(0x7f0000000400)="33467b0cd6865898d377492f3f43440cc542628630df4e579b098d48b71e83b587bbbb832a349e90012f36b9e0cc67613302829cbc9344df8010a56e8173e7071d554b1e3dfea2fe648bdc714e2319042b8c4479a7791840ebf1a4fa5ca9ecfb9527bd731213887b841cd01f06e35a500810aa3fa74904e06200d2583f40035a45c3cd447648c0dbc4d7f6deafbcd2cb6d17082cc12417bdd1d8fd57e86bec39d7d93c28c2ca010f5ddc1719d2", 0xad, 0x9}, {&(0x7f00000004c0)="8a193c1a952048f75778cd8cede70260dbb6edb3aea46927f19fa3c36ed1207ae11be16758f66f97617e244c681635bb77245f534f81668a2d4ed1f2cc19774fbc02e55dc8404188e4ebba384e22f26fda630d5e1c5e267b9fe865e7bf058b750c69204d07a456c68470f29acfd6faa1a815e0d757f240aead1282683929915848478d5032af970b43820449a092d1706f326c3d6d113bb815254a989f5e8b5425ca5c9ab78bfe916c66adb7f6338f5f4e0ffffd52b4a347e4b302ea8b8d312cf2ea16e451d18a46bfdb5c8cbb5c243b48b055f6247446ab47d4e95b6a15f33cf1", 0xe1, 0x81}, {&(0x7f00000001c0), 0x0, 0x5}, {&(0x7f00000005c0)="5e999d962c5a353b2ba4bbfcaad7fc4d549664ec14249bed80f9d57452a4dbe4ca594a4999c759215d36879d49f17b3c4eebbbdedc133178dc7ed92a6188d4bf39c8bf8ec6c2fdc8c9d2e4e72779ae95bec7a72a3c240f144f3e243f65ce", 0x5e, 0x9}, {&(0x7f0000000640)="eed87acec630c6f7e81ccd43e4a847182470c8cc015e713ef310d377e5fbd4d7e67900634644537c2bc66e1032e339cc7d3976720aeae432e7766e09e57fb1733af9572dcf5fe7488ce86ce7dc12e899eb855c15d27dde1b6a62db7d63301200ba3dd4b07272f959b9bf3f9c669a07dffc5b6667688aa547115b60907a1813888b6b12273c8f8f3ef9e0ce8d90d607cae3c81e2fdb06b1b634303a94f725d4", 0x9f, 0xffffffffffffffc1}, {&(0x7f0000000700)="740a769f858e3b26b6de282739e3b91ee90fd6d01a81bd332a7f47d101e51f914c24e9aabc4a1cf2069924b87c4a6a8d68c3fd29b093d5bbc3ee4aa8ebf1338e4af9d7f699978b1daa69b403a9be23503c7997ce25844155f6daf4963305a347580a", 0x62, 0x800}], 0x0, &(0x7f0000000940)={[{@quota='quota'}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uid={'uid', 0x3d, r3}}, {@integrity='integrity'}], [{@permit_directio='permit_directio'}, {@fowner_lt={'fowner<', r4}}, {@subj_role={'subj_role'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '*+\''}}, {@subj_type={'subj_type'}}, {@obj_user={'obj_user', 0x3d, 'nodev'}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1061.341173][T21331] usb usb3: check_ctrlrecip: process 21331 (syz-executor.0) requesting ep 01 but needs 81 [ 1061.375615][T21331] usb usb3: usbfs: process 21331 (syz-executor.0) did not claim interface 0 before use [ 1061.420164][T21472] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:42 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1}) 08:41:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x8, 0x129840) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) [ 1061.580895][T21540] usb usb3: check_ctrlrecip: process 21540 (syz-executor.0) requesting ep 01 but needs 81 [ 1061.596201][T21542] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1061.622436][T21540] usb usb3: usbfs: process 21540 (syz-executor.0) did not claim interface 0 before use [ 1061.646984][T21340] jfs: Unrecognized mount option "permit_directio" or missing value [ 1061.718286][T21350] XFS (loop2): Invalid superblock magic number 08:41:42 executing program 0: r0 = syz_open_dev$usb(0x0, 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1}) [ 1061.825734][T21535] XFS (loop4): Invalid superblock magic number 08:41:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x10012, 0x0, &(0x7f0000ffb000/0x3000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{0x40000000000000, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa1}]}) 08:41:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r6, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:42 executing program 0: r0 = syz_open_dev$usb(0x0, 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1}) 08:41:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00'}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:42 executing program 0: r0 = syz_open_dev$usb(0x0, 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1}) 08:41:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}]}) 08:41:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r6, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00'}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:43 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1}) [ 1062.542548][T22166] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1062.577767][T22169] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:43 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1}) [ 1062.799602][T22090] XFS (loop2): Invalid superblock magic number 08:41:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x20440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) [ 1062.905061][T22098] XFS (loop4): Invalid superblock magic number 08:41:43 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1}) 08:41:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r6, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:43 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1}) 08:41:44 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1}) 08:41:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00'}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20ncci\x00', 0x266342, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, &(0x7f00000000c0)=""/7, &(0x7f0000000140)=""/137, &(0x7f0000000240)=""/244, 0x1002}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) 08:41:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) gettid() syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00'}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:44 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1}) [ 1063.570914][T22705] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1063.645321][T22827] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}]}) 08:41:44 executing program 0: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1}) 08:41:44 executing program 3: r0 = getpgrp(0xffffffffffffffff) tkill(r0, 0x16) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}], 0x1}) [ 1063.951867][T22662] XFS (loop2): Invalid superblock magic number 08:41:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r2, 0xae80, 0x15000000) 08:41:44 executing program 0: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1}) [ 1064.002873][T22686] XFS (loop4): Invalid superblock magic number 08:41:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x4557434d) openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) sendfile(r0, r3, 0x0, 0x20000000006) 08:41:44 executing program 0: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1}) 08:41:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x28}, 0x4e20, 0x7c4, 0x4e21, 0x0, 0x2, 0x20, 0x20, 0x2d, r4, r5}, {0x0, 0x100000000, 0x6, 0x80000000, 0x101, 0xffffffffffffffca, 0x1000, 0x2}, {0x8001, 0x2, 0x750, 0x5}, 0x9, 0x6e6bb4, 0x0, 0x0, 0x3, 0x3}, {{@in6=@rand_addr="af6940e1287619db0c341b3ddc0d4aba", 0x4d2, 0xff}, 0x0, @in6=@dev={0xfe, 0x80, [], 0x23}, 0x3505, 0x6, 0x0, 0x4, 0xfffffffffffffffb, 0xe17, 0x6}}, 0xe8) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f00000001c0)=r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, 0x0, 0x0, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) gettid() syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:45 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0) 08:41:45 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0) 08:41:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x4557434d) openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) sendfile(r0, r3, 0x0, 0x20000000006) [ 1064.682014][T23137] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:45 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0) [ 1064.787871][T23139] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1064.997244][T23129] XFS (loop2): Invalid superblock magic number [ 1065.033647][T23133] XFS (loop4): Invalid superblock magic number 08:41:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x9, 0x503000) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {r3, r4/1000+30000}}, 0x0) 08:41:47 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x0, 0x1}) 08:41:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x4557434d) openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) sendfile(r0, r3, 0x0, 0x20000000006) 08:41:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) gettid() syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, 0x0, 0x0, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) gettid() syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) [ 1066.936417][T23286] vhci_hcd: default hub control req: 0000 v0000 i0001 l0 08:41:47 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x0, 0x1}) [ 1067.050305][T23305] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1067.113449][T23320] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1067.214334][T23515] vhci_hcd: default hub control req: 0000 v0000 i0001 l0 08:41:47 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) 08:41:47 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x0, 0x1}) [ 1067.462607][T23280] XFS (loop2): Invalid superblock magic number 08:41:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) gettid() syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:48 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102}) 08:41:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2201, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}) r1 = syz_open_pts(r0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) [ 1067.506066][T23631] vhci_hcd: default hub control req: 0000 v0000 i0001 l0 [ 1067.531081][T23288] XFS (loop4): Invalid superblock magic number 08:41:48 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102}) 08:41:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0xffffffffffff6bdc, 0x3ff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e20, 0x3, @remote, 0x23}}}, &(0x7f0000000240)=0x84) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)) 08:41:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x1, 0x9b0, [0x0, 0x200000c0, 0x20000a40, 0x20000a70], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'caif0\x00', 'bridge_slave_0\x00', 'ipddp0\x00', '\x00', @remote, [], @broadcast, [], 0x8f0, 0x8f0, 0x920, [@among={'among\x00', 0x858, {{0x4a71, 0x4, 0x2, {[0x0, 0x6, 0xffffffffffffff3e, 0x1, 0x400, 0x8, 0x80, 0x3d25, 0x6, 0x7, 0x8, 0xe2, 0xffffffff00000001, 0xf23c, 0x101, 0x7, 0x20, 0x1, 0x7, 0xfffffffffffffff7, 0x8, 0x741c, 0xfffffffffffffffd, 0x7, 0x200, 0x7fffffff, 0x40, 0xab5, 0x8, 0x4, 0x1, 0x4, 0x5, 0x81, 0x2, 0x100000000, 0x1, 0xe95, 0x8, 0x0, 0x5687, 0x5, 0x841, 0x400, 0x2, 0x101, 0x8, 0x5, 0x8000, 0x0, 0x10000, 0x6f0c9a5f, 0x8, 0x200, 0x2, 0x4, 0x0, 0x8, 0x9, 0x7ff, 0x2, 0x3, 0x8000, 0x0, 0x8, 0xf61, 0x94, 0xc985, 0x1000, 0x0, 0x3f, 0x17, 0x1, 0xb5a, 0x8001, 0x10000, 0xe6d, 0x45, 0x800, 0xffffffffffff8000, 0x6, 0xffff, 0x6, 0x1605, 0xfff, 0x4800, 0x6, 0xfff, 0x140, 0x3, 0x7f, 0x1, 0xcb, 0x5, 0x1c0000000000, 0x7, 0x0, 0x0, 0x6, 0x8, 0x401, 0x85a, 0x44, 0x1000, 0x10000, 0xe8, 0xffffffff, 0x51d37c4d, 0x10000, 0x8, 0x5, 0x7, 0x8000, 0x6, 0x4, 0x3, 0x1000, 0x1, 0x8001, 0xc4, 0x1, 0x100000000, 0x7, 0x10000, 0x5666aa1c, 0x3, 0x0, 0x20, 0x0, 0x2, 0x8, 0x551, 0x1, 0x10000, 0x6, 0x2, 0x8, 0xffffffffffff2c48, 0xffffffff, 0x8, 0x0, 0x6, 0x7fff, 0x3ff, 0xe08, 0x9, 0x8, 0x9, 0x3, 0x2, 0x0, 0x9, 0x1, 0x3, 0x3, 0x81, 0x1000, 0x3ff, 0x7ff, 0x3, 0x2, 0x6d7b44a1, 0x6d, 0x5, 0x4, 0x5, 0xa8de, 0x1, 0x7, 0x2, 0x7828, 0x7fffffff, 0x4177, 0x64f8, 0x1ff, 0xffffffffffffff7f, 0x3, 0x4, 0x5, 0x1be, 0x4, 0x5, 0x7fffffff, 0xfffffffffffffffa, 0x6, 0x81, 0xffffffff, 0x40, 0xd871, 0x5, 0x7, 0x9, 0x8, 0x5, 0x7, 0x480000000000, 0x5, 0x1f, 0x0, 0xd19, 0x6, 0x100000000, 0xff, 0x8000, 0xffffffff, 0x2, 0x70c, 0x3, 0x1, 0x4, 0x9, 0x5, 0x7, 0x6652, 0x200, 0xfffffffffffff46e, 0x101, 0x2, 0x9, 0x800, 0x40, 0x10001, 0x100000000, 0x2, 0x6, 0x6, 0x8001, 0x7fff, 0x8, 0x8000, 0x5, 0x0, 0x45b, 0x7f, 0xe00000000000000, 0x113, 0x800, 0xffffffff00000000, 0x8, 0x400, 0x3, 0x1ff, 0xc93c, 0x1f, 0xadab29a, 0x5, 0xffff, 0x10, 0x4, 0xfffffffffffffffe, 0x5, 0xffffffff, 0x9, 0x5e5, 0x3, 0x9], 0x4, [{[0x8000, 0x5], @empty}, {[0x6, 0x3], @broadcast}, {[0x1, 0x7fff], @empty}, {[0x90, 0xba], @broadcast}]}, {[0x20, 0x5, 0x7, 0x5, 0x8, 0x5, 0x9cf1, 0x0, 0x817, 0xfffffffffffffffa, 0x80, 0x100000000, 0x4, 0x1, 0x9, 0x88, 0x4, 0xd492, 0x101, 0x150, 0x200, 0x7fff, 0x5, 0x401, 0x2, 0xbc, 0x9, 0x5, 0x5, 0x3, 0x62a39f43, 0x3, 0x8, 0xdc, 0x22, 0x6, 0x7, 0x3, 0xffff, 0x6, 0x528, 0x4, 0x101, 0x3, 0x1, 0x4, 0x7, 0x20, 0x89a, 0x100000000, 0x4, 0xfffffffeffffffff, 0xff, 0xffffffffffffffff, 0x6, 0x100000000, 0xfff, 0xa339, 0x80, 0x6b3a, 0x80000001, 0x1000, 0x101, 0x6, 0x2, 0xff, 0x81, 0x5, 0x3, 0xffff, 0xac7, 0x0, 0x400000, 0xb9a, 0x1000, 0x3, 0x5, 0x6, 0x400, 0x7fff, 0x3, 0x6, 0x9, 0xe1, 0xe0000000000, 0x1, 0x7, 0x1, 0x1000, 0x8, 0x20, 0x60000000000, 0xffffffffffff0000, 0x6, 0x8, 0x7, 0x10001, 0xffffffff, 0xc099, 0x7, 0x4, 0x0, 0x8, 0x6, 0x7, 0x2, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0, 0x9, 0x5, 0x8, 0x7, 0x9, 0x7ff, 0x10001, 0x5, 0x7, 0x1, 0x2, 0x4, 0xf8, 0x8, 0x8, 0x401, 0x4, 0x4, 0x101, 0x8, 0xfff, 0x6, 0x3f, 0x5, 0x8000, 0x5, 0x1000, 0x3, 0x2, 0x1, 0x2, 0x5, 0x7, 0x7ff, 0x2, 0x5, 0x7ff, 0x10001, 0x3, 0x2, 0x37a, 0x9, 0x0, 0x0, 0x1, 0x8, 0x101, 0x2, 0x0, 0x100000001, 0xc5c, 0x8, 0x2, 0x6, 0x5, 0xffff, 0xfffffffffffffffa, 0x101, 0x86, 0x9, 0x40, 0x7, 0x40, 0x6370, 0x6, 0x3, 0x2, 0x100, 0x9, 0x6, 0x3f, 0x9, 0x4, 0x2, 0x80000000, 0x2e18, 0x5, 0x4, 0x5, 0xffffffff80000000, 0x1, 0x0, 0x3, 0x2b6c61a7, 0xd945, 0x81, 0x7e6, 0x200, 0x0, 0x4, 0x7fff, 0x337, 0x7, 0x9, 0x3160636a, 0x81, 0x7, 0x6, 0x8000, 0x1, 0x9c09755, 0x4, 0x101, 0x2, 0x3ff, 0x5, 0x8b, 0x0, 0x6, 0x101, 0x2, 0x10000, 0x93, 0x0, 0x6, 0x5, 0x7fffffff, 0x351, 0xfffffffffffffff7, 0xfffffffffffffffe, 0x1c, 0x8, 0x400, 0x1, 0x2000000, 0x401, 0x6, 0xfff, 0x6, 0x3ff, 0xa1, 0xfffffffffffffff8, 0x6, 0x0, 0x3, 0x7fffffff, 0x0, 0x20, 0x0, 0x4, 0xffff, 0x100000000, 0x6, 0x7ff, 0x7d, 0xffffffffffffffff], 0x1, [{[0x4, 0x200], @dev={0xac, 0x14, 0x14, 0x12}}]}}}}]}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0xa28) 08:41:48 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102}) 08:41:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, 0x0, 0x0, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:48 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x300, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x40, 0x20000) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000480)={0x0, 0x1c9c380}, 0x8) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x5b1a0000, @loopback}, 0x1c) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x32, 0x0, 0xf, 0x17, 0x0, "7fa664e5ce778d8eb14287ce7944d5d9a0c7c2b07bddcc88eedda854f13a9f24b53e49318a3f5bcc0bbcfe01d923e075b6d96fe091b61944f7b774b8c25b224c", "dfe6403d6756cd031690cb0f60b37365eedacb7276ef1bb827051c4da67e456f8e57af5ef0cf1a2d1a12ce779d03a378c263b9934dd9ba39c39c1df4e69e5ae9", "309a0dc60cbb3a482f485011ff7342e8b9a3f82dcc8834bb1d9dd79d5ea548b2", [0x8, 0x7]}) r2 = fcntl$dupfd(r1, 0x406, r1) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f0000000380), 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000400)=@assoc_id=0x0, &(0x7f00000005c0)=0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000600)={r3, 0x3f, 0x5}, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) write$FUSE_POLL(r2, &(0x7f0000000640)={0x18, 0xffffffffffffffda, 0x3, {0xca16}}, 0x18) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10080, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setns(0xffffffffffffffff, 0x6000000) getpid() ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188") r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000080)={0x3ff, 0xa4, 0xfffffffffffffeff, 0x6}) 08:41:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000080)=""/59, 0x3b) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) 08:41:48 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000140), 0x391, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010, 0x4, 0x401, 0x0, 0x8, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffdc0, 0x7f, 0x8, 0xfef, 0x7fffffff, 0x200, 0x1000, 0x0, 0x3, 0x0, 0x2, 0x5, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x2, 0x0, 0xf, 0x0, 0xfffffffffffffffb, 0x3ff}, 0x0, 0x0, r1, 0x3) [ 1068.225108][T24076] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1068.352490][T24079] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) gettid() syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:49 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x300, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x40, 0x20000) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000480)={0x0, 0x1c9c380}, 0x8) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x5b1a0000, @loopback}, 0x1c) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x32, 0x0, 0xf, 0x17, 0x0, "7fa664e5ce778d8eb14287ce7944d5d9a0c7c2b07bddcc88eedda854f13a9f24b53e49318a3f5bcc0bbcfe01d923e075b6d96fe091b61944f7b774b8c25b224c", "dfe6403d6756cd031690cb0f60b37365eedacb7276ef1bb827051c4da67e456f8e57af5ef0cf1a2d1a12ce779d03a378c263b9934dd9ba39c39c1df4e69e5ae9", "309a0dc60cbb3a482f485011ff7342e8b9a3f82dcc8834bb1d9dd79d5ea548b2", [0x8, 0x7]}) r2 = fcntl$dupfd(r1, 0x406, r1) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f0000000380), 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000400)=@assoc_id=0x0, &(0x7f00000005c0)=0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000600)={r3, 0x3f, 0x5}, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) write$FUSE_POLL(r2, &(0x7f0000000640)={0x18, 0xffffffffffffffda, 0x3, {0xca16}}, 0x18) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10080, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setns(0xffffffffffffffff, 0x6000000) getpid() ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188") r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000080)={0x3ff, 0xa4, 0xfffffffffffffeff, 0x6}) [ 1068.550830][T24068] XFS (loop4): Invalid superblock magic number 08:41:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vfio/vfio\x00', 0x10080, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @remote}, {0x2, 0x4e23, @loopback}, 0x8b, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)='caif0\x00', 0x2, 0x6, 0x9}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) [ 1068.635694][T24075] XFS (loop2): Invalid superblock magic number 08:41:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005d80)=ANY=[@ANYBLOB="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"], 0x180}}], 0x1, 0x20000000) 08:41:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) 08:41:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000008c0)={0x0, {}, {}, {0x2, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)='bridge_slave_1\x00'}) 08:41:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340), 0x0, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10000000000b, 0x6, 0x5}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x3}, 0x2c) 08:41:49 executing program 0: clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) epoll_create1(0x0) epoll_create1(0x0) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 08:41:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x5) r2 = dup3(r1, r0, 0x0) write$UHID_INPUT(r2, &(0x7f0000001640)={0x8, "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", 0x1000}, 0x1006) [ 1069.321436][T24825] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:49 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000180)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x1000000}, 0x1500) 08:41:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x1ffffffc, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) [ 1069.446209][T24773] XFS (loop4): Invalid superblock magic number [ 1069.527202][T24964] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:50 executing program 0: accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7fffffff}) pwrite64(r0, &(0x7f00000002c0)="e4fa8e520e759cc55671aeae", 0xc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0xed5e0000, 0x10000000, 0x0, 0x20000fff}) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001540)=ANY=[@ANYBLOB], 0x1}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) socket$alg(0x26, 0x5, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) 08:41:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000080), 0x80800) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) [ 1069.699697][T24907] XFS (loop2): Invalid superblock magic number 08:41:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:50 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:41:50 executing program 5: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000100)="474a3654e022") clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 08:41:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) [ 1070.101136][T25794] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340), 0x0, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:50 executing program 0: accept4$inet(0xffffffffffffff9c, 0x0, 0x0, 0x80800) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0aca2a034766c4b369c070") getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x3, 0x0, [], 0x1, &(0x7f0000000140)=[{}], 0x0}, &(0x7f0000000380)=0x78) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="a3", 0x1, 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8715"], 0x2) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x10000016b) sendto$inet(r0, &(0x7f0000000540)='?', 0x1, 0x20000001, 0x0, 0x0) 08:41:50 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:41:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b805000000b9008000000f01c1f080a4b000600000000fc3180f09c744240000000000c744240200080000c7442406000000000f0114240f08f3a5650f050f20da0f01cf", 0x44}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) r2 = semget$private(0x0, 0x4, 0x3) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x81}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000280)={r4, 0x40, "c8b529b54b603c5d6f858e9d7165e17cf5b01e2a01bb2ab83b48423ad45fb66394d09c7d2fbd3e29c0f2d7129f929b1afa447bf52f1a8d6fa0e3dff7a8181e0c"}, &(0x7f0000000300)=0x48) semctl$GETVAL(r2, 0x0, 0xc, &(0x7f0000000140)=""/186) 08:41:51 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1070.461660][T26050] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1070.495493][T25500] XFS (loop4): Invalid superblock magic number 08:41:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) shutdown(r3, 0x0) splice(r1, 0x0, r3, 0x0, 0x1ffbc, 0x0) 08:41:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x9, 0x401) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000140)=0x3, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)) [ 1070.682872][T25859] XFS (loop2): Invalid superblock magic number 08:41:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:51 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:41:51 executing program 0: unshare(0x24020400) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) r3 = getpid() open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = eventfd2(0x0, 0x0) execve(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) dup3(r1, r4, 0x0) fcntl$setown(r4, 0x8, r3) socketpair$unix(0x1, 0x803, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) 08:41:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2ac, 0x0) write$binfmt_script(r1, 0x0, 0x0) close(r0) 08:41:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340), 0x0, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:51 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1, 0x82) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1d, r3}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x2, 0x478, 0x1ff, {}, {r4, r5/1000+10000}, {0x0, 0x5, 0x4b, 0x9}, 0x1, @canfd={{0x3, 0x2, 0x81, 0x5d2a}, 0x1e, 0x3, 0x0, 0x0, "c208cae59b2af1b6f048a9e191d22d3df0f019da40d81ee9f957115718b4e9ba3b81ab1a505a0cee943851d94a2f118967fd6959facd27a1ababd56a6b6fbb59"}}, 0x80}, 0x1, 0x0, 0x0, 0x8080}, 0x20004054) 08:41:51 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:41:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002740)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b805000000b9008000000f01c1f080a4b000600000000fc3180f09c744240000000000c744240200080000c7442406000000000f0114240f08f3a5650f050f20da0f01cf", 0x44}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000014c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:41:51 executing program 5: [ 1071.158163][T26564] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:51 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:41:51 executing program 5: [ 1071.364546][T26475] XFS (loop4): Invalid superblock magic number [ 1071.391038][T26707] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:52 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1071.643666][T26605] XFS (loop2): Invalid superblock magic number 08:41:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) 08:41:52 executing program 5: 08:41:52 executing program 0: [ 1071.982781][T26907] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{0x0}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:52 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:41:52 executing program 5: 08:41:52 executing program 0: 08:41:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200, 0x0) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000240)=0x2) 08:41:52 executing program 5: [ 1072.162020][T26817] XFS (loop4): Invalid superblock magic number 08:41:52 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:41:52 executing program 0: [ 1072.289547][T26969] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1072.526128][T26941] XFS (loop2): Invalid superblock magic number 08:41:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:53 executing program 5: 08:41:53 executing program 0: 08:41:53 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1072.771109][T27076] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1072.850510][T27071] XFS (loop4): Invalid superblock magic number 08:41:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{0x0}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @ib={0x1b, 0x8, 0x7fffffff, {"26d9634bd5f07d46ccac660022a7b8fe"}, 0x196, 0x3ff, 0x401}}}, 0x90) 08:41:53 executing program 5: 08:41:53 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:41:53 executing program 0: 08:41:53 executing program 5: 08:41:53 executing program 0: 08:41:53 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1073.199714][T27183] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:53 executing program 5: 08:41:53 executing program 0: 08:41:53 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1073.485615][T27116] XFS (loop2): Invalid superblock magic number [ 1073.549376][T27232] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1073.683309][T27225] XFS (loop4): Invalid superblock magic number 08:41:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{0x0}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x4000, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) 08:41:54 executing program 5: 08:41:54 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:41:54 executing program 0: 08:41:54 executing program 5: 08:41:54 executing program 0: 08:41:54 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1074.098838][T27344] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:54 executing program 5: 08:41:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f00000000c0)='net/ip_vs\x00') r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe995}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) 08:41:54 executing program 0: [ 1074.359106][T27379] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1074.450619][T27272] XFS (loop2): Invalid superblock magic number [ 1074.582205][T27372] XFS (loop4): Invalid superblock magic number 08:41:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:55 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:41:55 executing program 0: 08:41:55 executing program 5: 08:41:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 08:41:55 executing program 0: mq_open(0x0, 0x840, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getpgrp(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x48c000) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x81) r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x00\x00!\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 08:41:55 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) fallocate(r0, 0x11, 0x0, 0x100000001) 08:41:55 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:41:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:55 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) [ 1075.156683][T27734] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x8000000501004, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f00000000c0)=0x87, 0x4) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000080)={0x2, 0x8}, 0x2) 08:41:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) r2 = socket$inet6(0xa, 0x3, 0x10000000003) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000003c0)={@remote, r1}, 0x14) [ 1075.296756][T27823] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1075.454502][T27562] XFS (loop2): Invalid superblock magic number [ 1075.503211][T27767] XFS (loop4): Invalid superblock magic number 08:41:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:56 executing program 5: r0 = socket$packet(0x11, 0x100000002, 0x300) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000140), 0x4) 08:41:56 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) 08:41:56 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r2, &(0x7f0000000140), 0x391, 0x0) fsetxattr(r0, 0x0, 0x0, 0x0, 0x0) 08:41:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) mknod(&(0x7f0000000080)='./file0\x00', 0xd100, 0xa) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x40000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004841}, 0x80) r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000140)) 08:41:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:56 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) [ 1076.066086][T28265] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1076.111564][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1076.111570][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1076.111894][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1076.117390][ C1] protocol 88fb is buggy, dev hsr_slave_1 08:41:56 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:41:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1076.180292][T28382] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1076.308223][T28132] XFS (loop2): Invalid superblock magic number 08:41:56 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x800, 0x2000) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0xa1, "2e044bcd3ac2e5b2bab16eeefb4f73d98d3c4f33767d4f3ae18db571efb50c384b3d5e1f62d73ad5476578d64b7812f45927913891ac0a662ae662975da83d5719255b6379d95bfee7c6640583cf9c348aa2e418fd5fe906dc85d570c89025c28b3fd516eee021a18c1d1d37197d0ac8fed9351ec8ca382a1c5929fad2056a816a3dbf75494407af24bcf4a57c9d02655fe69d268ee1c92abb67ef4b3b8f06de5c"}, &(0x7f0000000180)=0xa9) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)={r3, 0x9156}, &(0x7f0000000300)=0x8) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)) 08:41:56 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1076.476791][T28294] XFS (loop4): Invalid superblock magic number 08:41:57 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:41:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000000c0)=0xff) 08:41:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) [ 1077.050360][T28732] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001680)='/dev/snd/pcmC#D#p\x00', 0x101, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000016c0)) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r3, &(0x7f0000001640)={&(0x7f00000000c0), 0xc, &(0x7f0000001600)={&(0x7f0000000300)={0x12f4, 0x8, 0x9, 0x311, 0x70bd2b, 0x25dfdbfb, {0xe, 0x0, 0x8}, [@generic="4bb9b1ca06f246485931afe8de5291f52e0de12757521d3a46ebb0b3275aa752977e492d902f1ff976aa096986814ebf74f20cb51e430ceda706d885987d1a63d22ff5a7f204db9f0c5fe4908f74a115cc4f895dcbf8c3d52a76d66047d510cbca003478abeca298e6f534ecf913661786daf498ba5d767c21c3488ccf41ac68d94ba017a92748c7", @typed={0x8, 0x7, @uid=r4}, @typed={0x8, 0x5a, @ipv4=@multicast1}, @typed={0x8, 0x51, @u32=0xff}, @typed={0x8, 0x3f, @fd=r1}, @typed={0x8, 0x88, @ipv4=@multicast1}, @nested={0x1230, 0x4, [@generic="858d5f02dab6257bad4585bfd8c785c9f0cbac9cd12f95edc92faffdf5d9dced06da4b8257fd751816c69acdadf9d3397b5954355ed02549653118e2cfd0525d2f4f642595c7463c1155e7be3ac819f5fd19b29467274174d6", @generic="0752334b467589d63c379ea48e95c44834dcd066b8dd4985eaa716e1002b13e5ec21e0c3eb1e64073116133ce778e163c113be6638e805a04899f181371aaadb4f5b7e31a51321ec04dafa52ba1eb978dd6ee732bb86c3d733667caeab17636d8ef4a0c9f08fa0d4ec4c88e18a88bab318784d996557a9a3f419bb225891427222b81934f82e11d05b8d6cf15dd697976862c20aa85016fdce348cab66555af819647cbb85a279846327be6a8952a15d035a9d5dbe0a061152a57467a9c7fbb48c524018695c0008fddbb4632ba99572174d875ac9ba4e03bf6f2ae9825de6d980276070618a512d3d2c38f49d979f00780bcdc125f29500ea7be90c4cb9555c89c7988535b52729087c102d0871b7b58bf06fad09653d3ad980a673629a5695b6380adcee0397fa4ff0995d29595cc3ceca7372b8192c462e896930762e639116e96e66b9cf664fced9c9117baec5b444d5ddccf01a052da1231e073f612492fe75eb02968eb6b87f266b574eb77648fe1d6941dfbcdf2932b8454bb7b5fe90145f4d5e643058dd1ba0065ebb3f87775f1bcc804b7e08056916ebe36d7e9ae02338a46f72819bb714775bd4729f59acb3ca56ac7254b24137d4e9b6ff7adfdad686d114e4c07202af3ee4889f54ebda98a282a4f10f9b344cf467859041a7ba75acac93691664c69bc558e240151764b8151f2220bb3111fc5b7afb8f1d3f7abb5864524e84f470b610f69651d1792e240e918951e151f8589d69d95db76eac8f67de758855e895384e98bd39fc68038e897285354239f5cb7539fe8f423c2c932028a3c11d3fc10e75c57a855dec9e5a30df6b806b64cd760f4ea02d7231cc077821234279f1416540c8ac9c04aa596ecfdba3dfdf13a05f96076c82619d6269dee1546044c4103f45f42cc39818c0a4d3c686466ad1a0770d223e79661bd6d3dd4c71936d6b0de06468a60127f7774e0b6a5ff53559ce1e902606ebd60ce7a15494463b12289f8dbfb6733eba2df7532320366b8e63671c6b603c19e2c70e92b2d67bd202dff7c2b9e6c45c28d8101d37b655e3801432fb2771bf389a0d31c835d1a4c4993f9538bbc5034d317a42d458b5225d549546152a77a05e4c8606806527fae551ea4fd40c019582f32a86fa16c2a730d658a70462381a1a20d5e92beff9d30f877076220369d7962e43b43761e14d95571d293df7811234dbba7666f3b51521a7956d4a863d5611e528bcbd76262a897fb4cac10cb42a47f399609278abc9a776da6391f9f331c5de256b2ddd519a6d8c8af399a8756b5b272a2eaa12397f56acb99f7a411e9dec3e1a60acb1aa3d8b989b0c31fe6ba80726b9f5ec390e00eeabeed8f489e874be621f0b050a9673031a3b5b57d20a6d283d4b4157a1818567c46c7f0722ca1b7ca15a262a5f3222f9db08480dad9c5443f608fc48c1a628d67f3728a956fbe35e9147c1fc1ee143f877db76692171c47d2c0b51c9a56c9ae2d0574584f9b317f44a271ea8030a1909818636433b9292d62aad9f32a6a92cbe949cf36d5d44793032848efe4b111a8e41986cd29cfff9f4d5a9fe0c9bb430d28ac8d439338dd3e4ae09df85f77c06f672a0ee0bb4609b0e8091b7239becae7f7115ec195ac9ee27aff628e904fee10ce16ca5d8caf78273020ab88c558112b8ac4e98695f23fbc948c6845e8a7ebaebba7a30aec8e14c101d0b21d8cdd4ecb77cda004df9aa08acb28028c4c8ddede0014c4e6efcf56bd65cc589eae75ef6b7c82b7ba04cffce0640fdef141d27c8f03864e48c2960438198772e0477d0c68f64e8e8ac76539e7b3a6e5608b3219c5e304e55b9cf5de7ba6b79e81590651d55211768362094b07fab245e74eadcd828463773b1e536cdf9bc58bad17e7edd1ce97948f02a00efbaae3bcbd6e9fb8cacd2c6971bde1c7c143e644cc4cff0d6b4ced7d02897a04c2a6f177d56c1be128468d0defeb0d3ec206ab48a45adf26258e1c275fb0c49e38e38068ccee6431c85d818194f5275e40efd982217e3d70e687c588ea841a28eb1b6b6421a6ea2176ad6d68b8feb7258d684be2c77149f9f618128c4b7ec1ef33139d9c898fff75d6c6c479c0c0124f1fb461212a170928564ba65dd47622ebb4afbc7f2673b81cc8242bbc52315b85bf5306fa8024e9d7d74aad7df25abc74d829cf823dfaeb55c5e2b711ae7181e5bc4352f5a9016b40f474c0843dfa2441c49d9767ef3ab046937907d6f3b408ebdedcaed7b00f66f439c95c53e967b01b36e54e2831903a177b8243286f68c7e43e6c3ab848d7d11d20ce4fb70ee16c17b0e5bff606ba513e94e8f4441f19a5c1e7936c0e122c35ca1e2dcad55d7b2c8c83647895c8d4fc6fbe4de1805b08d9e200e3cd83932771202b022cb857693cba517938c976e28fd665001e92a2ba83b97635ab5c3ddce9e75a133aa0fbf1dbe5607e0644423f41b9512016f337918872c73c3f1fd6485ad76cf815861f6d5ef4ba1f26efb17a0519e67d15f3da83fe4a1be55b45447e84e3978d1da2524471182a3bcb4ce3280088938eedb86a707f7d76b8ebed0f0b49b6dd9392bbf139120cb0d445ef4236e049411949b773fd50d1a780f62606552a2bc31630b1dbc3b0f94fdebb9029927be607b017a5268f7bf834be582e7fbeac930dca10ddffd4a2bfa7e5419b337ae196f025a39b53f4cfe7ce7874415f0d1c2680b65f77b61864adbc99e9435cbfe9c84e81a505f3a0e7fc2848f015adb0b2de2e55d270830b17d59cf4907af222e04bfd577bae7639310e0e47be050675effb13427d111c2ccf565067bd70b859ce023dd7211a9c09309dec1bb6ba9f116567477d4766a3fc3fb16657a4fbfe4a7a1334ee79ba8b36bbafe493a1585deefafba1abf5f087f4acd96587597cec2ea00b80f4e5d691097a0e80662e82ce3d1206a0a60b39272c5fa2810445656cfe81207d921d538c038831c122057ff65b5f3684e7671e3da6d9157154001ca9be71e24feed282f33759604c56d93bc5036a5330a52e09ffd2f44421f43096196b046285b4ebbf4f71ca5ef30adaeaac9ebbe61bc0b9d1957836947555d0638c1f53afaf988d533bbf04337a6b619952b3a41391aae59e6da3cc1ed1667121b5e7c83e50717e41d95aef5631c7ace952c340110a3d0e7a9fd250f1f3ce3db4bf57a474d407968c3ab1eea6e9bc75cfacfe13ec3ff8bc8e95b885b3f264b18f9f9b7113b538fda27f8dee309523db48236f7aa52551a6d113b7f11d191d5d183aedc55ffbb04ea8bb0bae131f00d38759d605fa2ecb95e1c87ceeea7c86aa60c20ff67336b79942caafaf26eec0142badc7d5ee1893282cb0db083250e811b6ea0b7535a39aeb41923be0f4facca9449b2e92097f6d8124d7744f73ac17a3bc53d59c0de21e5d888a7f506afd0dd14fa15311d2061870dcf8618e8b3348ea2d118cd80d0f65883ddee649ee256b8be6c8a63b16c5d05a5916fca8540225fb9b2bce99abd3b9400c1de99bf0dd2984e0e0527ad608615f6e167c0a973b7352d054346a3036bdd8626f6fba1f6a680f9cc1db8e352b238f4ca49f5fab30c30fc27f96b6626dd4fea03f7da4ae0cf27a5f4042699f7987a970ad87537b2535aecd6b03bb67fc90f01d0a54c5ff54c722539e1ad8d8a278d15ac57a520e8acc819be117e843d15fd631eb090adaf63341497227773de08e2e3d4efa61058e93bc127627eb0adc824da3637c8afcd5f2307fa5d4f716e1a99b73364f15468c443995733b3a230e6534223e4172cfd9ca9a61e975dc3ca3ed5784b4ea11e17f42634e4e22739f74137bfce070a34fad38b8e08870b36ce47673b5d4b80bcb42258825a53a988b05a8635d90605cf4aadb61b09e9621da50f1b34fef022dcde50dcfae4be4c5009af4209edfd0db0d92166e0f7f102a8600f09f6ddaa5f43f754adb9bac158b2dcda886bb0ba8c2da06a26c528623ba480d43636c43fb9c76047e2420371880ca10e7d982db9cdd8542d21ef190ab24c5a50b1b9fff6b46c9bd927be1bb328fbcd039050c1cb4114bbaf08c2e8a04f4284c8dde6bea70cd0d3fa7c2d0e4f34b2c66de20adcb2d3af62969dbdf81e0cd006c8353616b5489941a231a7b5d6b24f2d72042467ee46224576fdb836b793568eea4470c9f1d2bff56842b5c71dfe912f44d202224540100a1937e110624109c22ac403cd7e8b2f437beff92ebfda66707dfb815e1c5acf687eb7a1354374407e896cd3ac1dfe3f90c4e97b5963aa403e8be8a4dbf4f7d2acbc65d61016dc6cb190bc119006e5c0e467c338f8c571d29eb892e6e54249419aaf1219441e73c410e18019da7b40cd4f0023d98212fdf8df15d5f8145efec79af996f0482b1ee993b6045fffee6241908a5a273360aeb5b737d6d7affb98ab121cd2f3dbd4967bae05f85a9ab7c5f521ebac30bb5406761fd4b3e0de98f1ec9ffba0703235e92b4b4005ede351ea8503bd83746e33d48c9a16ca06dc63143de6b3c86a8863643c76bb88b17c0d0e2ece0d8fbbcab53cd06b8c4d63205a9f8222297ddad83e91dc991228a6f1c85599f946db5e448e13eed1e705fa3a952e588f6782ea577d31498009342fe64f70c394ac170ed4e9e6a427d2cb8fb8c44afbdb3a6b0713b727747f140334f27d120fc7d3f14ab8384fd4aee94f8b199b3ae0946ff5ccbf04fb401906f3ef3165fefd64f2326c6deda6231e96175920e04b8a7b051b2dc3e42fa208fb49d4e9373adc1876f37baf947b2798d6c0f25c0d9e3b62f66a521935080ec5c02eb4820e3f8fffc0d58db5338773553671a81527e4656047b1d492f7f9874b560a781f98605234823da4e1bb428a39c8d932a6b12a3eb225ac9c7f217f2fdc4bcfcafd90cfb0160e71e41eb15e3140060c497cbe22c9ded7d0785c1af7c09949730b0a2c2a737d9e568c290cf0574a7c1c0459c478b82f9704d37d515f19b7071e1baf832f6ffbc10e38c109cc5fbb852e9c1d2c72b63992654ec6683f758e6b4295818a843f641ef03225114857b951162679338e1d29feb502acf94112fe72ec1c0aa4ca7e5c8469238b996b6bbd1587520b8c35677c1b9367b0e12d25ac8b69c4761e20db4f648175916d256e2df0a025c8e10ae7997d4c04918b012db755e850f842ce82a3262e62178a08a7c757a713f6cc50da3f11d919ab28f89754d6504c2355f43465842133e68fefd89c204f1fd61e5ffb4bca7285d000a4d5403d27d82109f2bbc90d4de0fd2dd73666b3237ec6953be2cce9014db8b52c0c373861a60142b343b58b078bcc629117944c2951a4fc18ca6e1e0f89c212373b985069ff56444a7c76b20b730652ddfa2f810efa7fc4c11522c32c979c2546431a4436aba92b5b40c3c84d30030238ab01dccf62ef210da669e2f8c871b6eee16ae1f808eecfcc8763045df991bfe813fa036d27b238fd5ae5de6fc0a1bce3eb75f1446da27c4fca1393296850968654f8781b2288c11afc16ba6c952cb9e1a482312592a3daf1d1ba8ac7053ce160af1707e001eb332362f298f2ed6712ca22adbb47d879f4c9b4cc717d4707524b172d6b2f702c6ee0703a81b2e4181532f7d4e6f4385711fb77713f46211a4c283dab003084e5bf4554b1335f6616063c9cf79467a68c05243ba2a276b6813f288242a9e177cde6a7138b675f9983c5eadc6e9fc449ea054e4d4cacc3f044049d7104718210b08183fda2234f8a948681b945ff4b0b8b4e74d72394a74a49fa57874a278eb369cbf53a189341a94a", @typed={0x10, 0x1a, @str='/dev/kvm\x00'}, @typed={0x8, 0x5c, @ipv4=@local}, @typed={0x8, 0x83, @u32=0x9}, @typed={0xfc, 0x46, @binary="1bf41730ca6e1b9e71a38d619a1432895c79e2f0d08f0b15c03a0e9dad0d007f1a06ed92a674109bf698579fc531f81ad0708c74fe7df45f220324eaa6b6b17fe75cbc7d87d27e8837350d5365ae5c45cf60d82e283478f8a3972fa68f4d4a30d4bcf644513d8360e8740cbc1a61f994f5be43d7ad1b7ae092935128c7b342e87ae09676f01fad03f49ea85d72dddf634c7cbb22df79d67d5893f505cdc21a0d98ac9b4628729e87fcbdbf9b6849009a18bf3293f1e8dadeaf2c4aa419a23c4c0aef034db86bbde86d687d11a1c73140c125e1600075078fc0acce8ff51c0fabc51f1f0d0cdb12571e1ec68cd7a7e502a9544931350c9da6"}, @typed={0x4, 0x89}, @typed={0x8, 0x75, @uid=r5}, @generic="4e378df655f652a9a9e6f2093b0cf1909cfdbfbab3696112ce5e4995567a7cefa0466e92b95b1f2d691d33e790ee628f2bd622a310975e561c5d396abef37a7ca3b0d0b5786fd9f9c929c4ae897071bfb9b867a94960eb415122fd33e206910d07b0970b33b41ebdc380b90ecb91e772953d5bea1634806ccdfd89bb415abe3b7721523c91acd4cac3c2752b9104e988032274ae32558f4a90b35c5b6a736ef1f616ad63c172da5e"]}]}, 0x12f4}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) 08:41:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) [ 1077.381042][T28651] XFS (loop2): Invalid superblock magic number [ 1077.527149][T28956] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:58 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000000)) 08:41:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x0) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) [ 1077.864526][T28855] XFS (loop4): Invalid superblock magic number 08:41:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) fsync(r0) [ 1078.083075][T29438] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) [ 1078.351258][T29388] XFS (loop2): Invalid superblock magic number 08:41:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x9, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000000c0), 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) ioctl$FS_IOC_FSGETXATTR(r3, 0x80045510, &(0x7f0000000240)={0x2}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 08:41:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) [ 1078.800157][T29896] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:41:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x0) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:41:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:41:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd6}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}]}) [ 1079.176080][T30055] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1079.265638][T29867] XFS (loop4): Invalid superblock magic number [ 1079.623268][T29986] XFS (loop2): Invalid superblock magic number 08:42:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) 08:42:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:42:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:42:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r5 = gettid() process_vm_readv(r5, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:42:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7, 0x400) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) 08:42:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:42:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x0) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) [ 1080.234583][T30725] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) [ 1080.395794][T30890] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1080.478440][T30698] XFS (loop4): Invalid superblock magic number 08:42:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) dup2(r0, r1) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) [ 1080.664449][T30774] XFS (loop2): Invalid superblock magic number 08:42:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x0) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:01 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x400000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000140)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000080)=0xfc) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)) 08:42:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r5 = gettid() process_vm_readv(r5, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:42:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:42:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340), 0x0, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x14006, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) epoll_create1(0x80000) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x20002, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x4c, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x6c}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 08:42:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x0) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1081.615582][T31587] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1081.715688][T31617] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x0) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x1, 0x553d6a9213de307e, 0x10001) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000080)=0x1a, 0x4) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000140)=@isdn={0x22, 0xffff, 0x4, 0x100000000, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)="33ebe12aaf6e6363fadac7de9c146a027a5bb737ca4684bd79a4fe191461d0e66e7a8fd9e1501c9f90e53a13d861c83d7fe4eca534cc2b33bb049b6bd32de0509b96900d7f931350d1e8e689cd3f9f62e2d71323a890979c67f2793d1ca363bb430074fbccc876ef05ac411c454b7457877504dcb5f7f767c72f055a93ff383c2d00176453be5cf39919183db70d3be4be291e170ab80ee386c9f4bc06", 0x9d}, {&(0x7f0000000300)="9179ea5e339e42ef65888324d28685937f235e8e4673956f6672fb5cabd8f7745ca18aad09addd13ee73af3c3a41d871323aa3522a97994a7b31303dda946679c9be92c6d3704163d11d071845718f8d5fcc0a1450bd98fe661c87a21c5b409ae4ac85350dbc0cd640ae7fc2a5b79c9d0a2180ec88ea6370cdf86a04c7f1e47246f4eb84c7a716333f", 0x89}, {&(0x7f00000003c0)="120059bf0aa316a90774c0db7e98f7c0a2ba53a9f8d2cc66534444d12a7234baa162953a4a53afc115f877b99842b6fc6a1478a05bdd2a385529778ec5b6421898d880d96194dda2a2bd26079acef3ef882760e6d53cb4ba5986f18928d421e65aca7548ed5bcf7a154598565ab8903e8924e85d7a0dc2a397e11d2d7a8b0a358198388dc5ea21165f8572541e5b152cc533557aa07871a5f3884692c554c06e5e15885673b51c124be232", 0xab}], 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="88000000000000001301000001000000b8d948e0d3a54866b78ce406b59678053ea45c5d629c99bb2215836a14a752916cde11d0f193bcd93ae82d232f74c565291ba7c185df0d8b09612b39da9e41ce08c96814954d179febb1736d04e91d01273a5f519b358982cf9cdb1f9f976d7b9eb179fb47e159682ed0268f4533bb919960ef0000000000380000000000000018010000090000002b7e5f30785b729360205310d517f3fb1315f57fdae7f033c4cf567a69bfee53f16dbff3be000000e0000000000000000e01000080000000c1e1e98785b9ad8dc43ff4133a1a11de7d684f0d2996693e40415d7d2987ca358d306b332e7d841ff4c827d9e4537b8d3ae5edded674780060785b77398addefa554269debf00ec2cbaf536e9752b5568a1a70d1a7d5cb89226a2d5a4d53dcfba5f31975829c6011d490ab353d411d5df014ca16472e0ae4e0866e1f40b595a6c9a3eec626db4584cc4e3e94d1ae45cfaedc7d72423c0a1a70c1194f647b9465dd2dc9d96753449945d328ac06657a31ffcabc8e438b0b7d58b47afb115dfba829b4e72a139c189682ea000000000000a0000000000000001f0100007f000000e0f52e09e9a617064993e9296bfe64e844f5475ee7e697dc9c96020000006fe257d428c9926a9a7533b39adc4fe3948485a4fa5db29728352ecb56e31fc27ee056a87564648e3f7d3f84e22eacf43dac71f6c9e3a75fc68695abbd433a620c61ff5abeb5106bdd88ab04dd0e46f34f0082d81f6019a460aeac8e7418e2e3b10a1de4df3f1125042fb56afd0000000000"], 0x240}, 0x20000000) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000006c0)=0x7) [ 1082.079658][T31570] XFS (loop4): Invalid superblock magic number 08:42:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340), 0x0, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1082.234470][T31569] XFS (loop2): Invalid superblock magic number 08:42:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x800) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000240)=""/4096) r3 = fcntl$getown(r1, 0x9) process_vm_writev(r3, &(0x7f0000001640)=[{&(0x7f0000000140)=""/33, 0x21}, {&(0x7f0000001240)=""/136, 0x88}, {&(0x7f0000000180)=""/15, 0xf}, {&(0x7f0000001300)=""/254, 0x14d}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f0000001400)=""/246, 0xf6}, {&(0x7f0000001500)=""/98, 0x62}, {&(0x7f0000001580)=""/153, 0x99}], 0x8, &(0x7f00000017c0)=[{&(0x7f00000016c0)=""/195, 0xc3}], 0x1, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001840)='/dev/video35\x00', 0x2, 0x0) open_by_handle_at(r4, &(0x7f0000002880)={0x10e6, 0x8, "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"}, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f00000000c0)={0x5, 0x5, 0x1}) ioctl$TIOCSTI(r2, 0x5412, 0x800) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) 08:42:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x0) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r5 = gettid() process_vm_readv(r5, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:42:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x0) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) [ 1082.884634][T32423] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340), 0x0, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1083.127132][T32484] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340), 0x0, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1083.313507][T32379] XFS (loop4): Invalid superblock magic number 08:42:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) r2 = getpid() r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x284f00, 0x0) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000180)={0x4}) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0xb1, 0x8, 0xffffffffffff0000, 0x8, 0x0, 0x638eda16, 0x10012, 0x2, 0x40, 0x802e, 0x400000000000, 0x8, 0xcf, 0x20080000000000, 0x4, 0x8, 0x7fff, 0x0, 0x4abd, 0x200000000000000, 0xfffffffffffffffa, 0x8, 0x8, 0x5, 0xffffffff, 0x1478, 0x5, 0x8, 0x2, 0xffff, 0x20, 0x3ff, 0x4, 0x3, 0xce, 0x2, 0x0, 0xbbee, 0x4, @perf_config_ext={0x3, 0xfffffffeffffffff}, 0x401, 0x9, 0x3f, 0x3, 0x8, 0x3, 0xa9}, r2, 0x9, r3, 0xa) 08:42:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x0) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1083.487080][T32448] XFS (loop2): Invalid superblock magic number 08:42:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, 0x0, 0x0, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r5 = gettid() process_vm_readv(r5, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:42:04 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) syz_open_procfs(r0, &(0x7f0000000080)='net/udplite6\x00') r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xb49, 0x40) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)) 08:42:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r5 = gettid() process_vm_readv(r5, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:42:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x18000, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{}, {0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) [ 1084.125204][ T841] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, 0x0, 0x0, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, 0x0, 0x0, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1084.511153][ T913] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) [ 1084.619227][ T764] XFS (loop4): Invalid superblock magic number [ 1084.692376][ T1040] XFS (loop2): Invalid superblock magic number 08:42:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r5 = gettid() process_vm_readv(r5, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:42:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, 0x0, 0x0, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x289, 0x80000) write$P9_RWSTAT(r2, &(0x7f00000000c0)={0x7, 0x7f, 0x2}, 0x7) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) 08:42:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r5 = gettid() process_vm_readv(r5, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:42:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, 0x0, 0x0, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, 0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1085.463972][ T1652] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) [ 1085.673558][ T1814] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1085.976586][ T1534] XFS (loop4): Invalid superblock magic number 08:42:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r5 = gettid() process_vm_readv(r5, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) [ 1086.105151][ T1720] XFS (loop2): Invalid superblock magic number 08:42:06 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f00000000c0)={0x9, 0x9, 0x3}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000080)={0x3, 0x1}) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000000)) [ 1086.179194][ T2006] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x18000, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{}, {0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) 08:42:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x240000000000000, 0x121001) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2060c0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00052cbd7000fddbdf2505d20000000006000000000008000600e6000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) 08:42:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, 0x0, 0x0, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) gettid() syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:42:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r4 = gettid() process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:07 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7fffffff, 0x200) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000140)=""/168) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}], 0x3}) 08:42:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, 0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1086.887087][ T2394] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, 0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1087.012652][ T2614] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000240)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) [ 1087.342648][ T2349] XFS (loop4): Invalid superblock magic number 08:42:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) gettid() syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:42:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, 0x0, 0x0, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1087.607262][ T2429] XFS (loop2): Invalid superblock magic number 08:42:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x4, 0x100) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000240)={0x8, 0x0, [{0xc000000f, 0x6, 0x3, 0x10001, 0x6}, {0x80000019, 0x5, 0x9, 0x6, 0xcd}, {0xc0000019, 0xfa2, 0x6, 0x100, 0x10000}, {0xd, 0x4, 0x1, 0x6, 0x9}, {0xc000000f, 0x10001, 0x561, 0x6, 0x200}, {0x8000001f, 0x3, 0x5, 0x3}, {0x40000001, 0x9e, 0x5, 0x8001, 0x4}, {0xf, 0x2, 0x101, 0x7}]}) 08:42:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r4 = gettid() process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, 0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, 0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) gettid() syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) [ 1088.276055][ T3279] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) dup(r1) [ 1088.400117][ T3278] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, 0x0, 0x0, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1088.619614][ T3296] XFS (loop2): Invalid superblock magic number 08:42:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, 0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1088.748376][ T3271] XFS (loop4): Invalid superblock magic number 08:42:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) fgetxattr(r0, &(0x7f0000000140)=@random={'btrfs.', '/dev/kvm\x00'}, &(0x7f0000000180)=""/77, 0x4d) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000000c0)=0x2) 08:42:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, 0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r4 = gettid() process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) [ 1089.331208][ T3968] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80000, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r3, 0x204, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) [ 1089.480759][ T3969] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1089.601120][ T3957] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) gettid() syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, r4, &(0x7f0000002c00), 0x2) 08:42:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, 0x0, 0x0, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1089.796208][ T3926] XFS (loop2): Invalid superblock magic number [ 1089.810762][ T3929] XFS (loop4): Invalid superblock magic number 08:42:10 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x80000000, 0x0) sendto$ax25(r0, &(0x7f0000000140)="e6819c1e49083acf915b752f183b061a203d463740e29c70bd02db6e694ce5d77c3efb08fb6a4228376a81ea670d615128fa942cc827e9d1530d0e58a8d932d67963afffb9113f2fc16d1d01df2293e3a0cf1ca19facb1bff64a3781e51aac4c5b9d6e52896f5d0bf523ac562f1854df82ab5d2d2a159b8735c055fe32966f2ed4b961350b10ec73ae0b21093bebcd81019832cd8a002903de1af1ccd4ff", 0x9e, 0x80, &(0x7f0000000240)={{0x3, @null, 0x4}, [@null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x40010e, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)) 08:42:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:42:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r4 = gettid() process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}]}) 08:42:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1090.493899][ T4780] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) ioctl$RTC_PIE_OFF(r1, 0x7006) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)) 08:42:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1090.668366][ T4654] XFS (loop4): Invalid superblock magic number 08:42:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1090.713342][ T4848] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1090.980000][ T4815] XFS (loop2): Invalid superblock magic number 08:42:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:42:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000140)={0x1, 0x8, 0x6, 0x1}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x3, 0xd15, 0x8e, 0x3f}, 0x10) 08:42:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r4 = gettid() process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r4 = gettid() process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) [ 1091.438469][ T5586] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:12 executing program 3: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x400000, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)={0x200000000000416}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000000)) [ 1091.618882][ T5527] XFS (loop4): Invalid superblock magic number [ 1091.837941][ T5859] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) r2 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x4, 0x80) bind$vsock_dgram(r2, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x0, 0xffffffffffffff01}, 0xfffffffffffffd41) write$P9_RRENAMEAT(r2, &(0x7f00000001c0)={0x7, 0x4b, 0x1}, 0x7) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000240)=0x4388) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000080)={0x9, 0x0, 0xffff, 0x7c8, 0x2000000000000, 0x2, 0x1b}) 08:42:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r4 = gettid() process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) [ 1092.339583][ T5694] XFS (loop2): Invalid superblock magic number [ 1092.390564][ T6094] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r4 = gettid() process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x80, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000140)={0xc4f, 0x2, 0x80000000}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) 08:42:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x10000000) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x260202, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xa) r4 = dup3(r2, r2, 0x80000) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000040)={0x0, r4}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000000)=0x40, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1092.518164][ T6036] XFS (loop4): Invalid superblock magic number 08:42:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {0x0}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200040, 0x0) r2 = accept4$inet6(r1, 0x0, &(0x7f00000000c0), 0x800) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x8, @local, 0x80000001}, 0x1c) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000000)) 08:42:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r4 = gettid() process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1093.095513][ T6542] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x10000000) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x260202, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xa) r4 = dup3(r2, r2, 0x80000) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000040)={0x0, r4}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000000)=0x40, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:42:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/223, 0xdf}], 0x1, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) [ 1093.419759][ T6473] XFS (loop2): Invalid superblock magic number [ 1093.660689][ T6588] XFS (loop4): Invalid superblock magic number 08:42:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x10000000) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x260202, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xa) r4 = dup3(r2, r2, 0x80000) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000040)={0x0, r4}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000000)=0x40, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:42:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x2000000}) kexec_load(0x3fb400000000000, 0x5, &(0x7f0000001340)=[{&(0x7f0000001400)="eec13e4f9297aeef19ebee326f49c757872379d7f9a0056bbc5953397819617acf15d443bc75110bb34a005f4692fe9b05ab30759be49e26948db69141b56becb9201ea7b5f8a164c825b2e09d7231cbab9d56220b30e1c3db0f6f2de14a4d6c8b48ac6372dfc273679c46f135a439d54cc889a6639e9c0f452e3deb7ccb88feeb768cf12b347a4d1991b85fa4a88a147e7b3b09b1711de71909153b86b1d6484f997b0b75de1c8ff5c6b4a4b69af1b1f801ebb91e262648b37deb7482815826af391600e2741811f66796cc5a63f3e62f", 0xd1, 0x2, 0x7fff}, {&(0x7f0000001500)="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", 0xfffffd94, 0x39, 0x9}, {&(0x7f0000001240)="114ccba4b0179627a9253e173b5bf944252aec6bb59329c6617b45a8a28ccfee31b38f4a5308d6112f9d676d48857dabae94b09f1bf7144fb701bedfcd28163b81d97524e33ffc6f965ccba6b4c0b72074f6be", 0x53, 0x5, 0x101}, {&(0x7f00000000c0)="7e5b2dde683674049d75da99c4e63a175c20ef3ddc5bd0227a67b9b687eced047dcc", 0x22, 0x10000, 0x1}, {&(0x7f00000012c0)="a298f4d7ca1e9d6781f0c578b130e27fce61fa1ba40c1bf9fd1d414f77a402c596cf564aa2c09198e343d0122f1d0b94b745bd1f302c9c7d79da254abdba668839bea94de674f57de910c900c44938231f4c38c1c8bd086a4e6c3aea058bbf6187cb70d554146b3a28fc18a5621d6a6f2873b65ebe288e795e", 0x79, 0x2, 0x1}], 0x3e0000) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) 08:42:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {0x0}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000140)=@md5={0x1, "417bc866dfa3f14e52173bbf4aeee057"}, 0x11, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000280), &(0x7f0000000240)=0x7c) [ 1094.412039][ T7493] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1094.835791][ T7476] XFS (loop4): Invalid superblock magic number 08:42:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x4001, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x513080, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @sack_perm, @timestamp], 0x3) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000200)) ioctl$CAPI_INSTALLED(r2, 0x80024322) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200}]}) 08:42:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) [ 1095.060613][ T7467] XFS (loop2): Invalid superblock magic number 08:42:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x3}]}) 08:42:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ustat(0x1, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:42:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) 08:42:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {0x0}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:42:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x200000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) semget$private(0x0, 0x4, 0x14a) 08:42:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {0x0}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1095.904301][ T8412] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1095.929439][ T8062] XFS (loop4): Invalid superblock magic number 08:42:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:42:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}) r2 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000440)) r3 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x200, 0x800) ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[0x8, 0xfffffffffffffffd, 0x3]}) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000480), &(0x7f00000004c0)=0x4) 08:42:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {0x0}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1096.250263][ T8332] XFS (loop2): Invalid superblock magic number 08:42:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r4 = gettid() process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:17 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001980)='/dev/audio\x00', 0x8001, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000019c0)={'IDDETIMER\x10\x00\x00\x00\x00\x00\x00\x00\x00(\x99F\xd7\x00'}, &(0x7f0000001a80)=0x1e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000140)=@ax25={{0x3, @default}, [@netrom, @netrom, @default, @netrom, @remote, @remote, @rose, @null]}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000280)=""/242, 0xf2}, {&(0x7f0000000380)=""/232, 0xe8}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f0000000580)=""/196, 0xc4}, {&(0x7f0000000680)=""/2, 0x2}], 0x7, &(0x7f0000000740)=""/91, 0x5b}, 0x6750cf7f}, {{&(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/167, 0xa7}, {&(0x7f0000000900)=""/20, 0x14}, {&(0x7f0000000940)=""/207, 0xcf}, {&(0x7f0000000a40)=""/238, 0xee}], 0x4, &(0x7f0000000b80)=""/251, 0xfb}, 0x1}, {{&(0x7f0000000c80)=@can, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/46, 0x2e}, {&(0x7f0000000d40)=""/228, 0xe4}], 0x2}, 0x8}, {{&(0x7f0000000e80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000f00)=""/17, 0x11}, {&(0x7f0000000f40)=""/105, 0x69}], 0x2, &(0x7f0000001000)=""/106, 0x6a}, 0x400}, {{&(0x7f0000001080)=@pptp, 0x80, &(0x7f0000001600)=[{&(0x7f0000001100)=""/157, 0x9d}, {&(0x7f00000011c0)=""/67, 0x43}, {&(0x7f0000001240)=""/205, 0xcd}, {&(0x7f0000001340)=""/113, 0x71}, {&(0x7f00000013c0)=""/189, 0xbd}, {&(0x7f0000001480)=""/14, 0xe}, {&(0x7f00000014c0)=""/42, 0x2a}, {&(0x7f0000001500)=""/165, 0xa5}, {&(0x7f00000015c0)=""/10, 0xa}], 0x9, &(0x7f00000016c0)=""/104, 0x68}, 0x10000}], 0x5, 0x2, &(0x7f0000001880)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000018c0)={0x0, 0xaa}, &(0x7f0000001900)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000001940)={r3, 0x4, 0x100}, 0x8) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000080)={0xfffffffffffffffd}) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}) [ 1096.722066][ T8993] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000240)=""/51, 0x33}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:17 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000140)={0x2, 0x3, 0x61, {r1, r2+30000000}, 0xfffffffffffffffb, 0xf}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x3, 0x7f, 0xb5c0000000000000}) 08:42:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r2, 0xae80, 0x48) 08:42:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {0x0}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1097.018105][ T9126] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1097.029619][ T8961] XFS (loop4): Invalid superblock magic number 08:42:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:cgroup_t:s0\x00', 0x1e, 0x1) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) 08:42:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) 08:42:17 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000000)=0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) msgget$private(0x0, 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x0, 0x80000001, 0x40, 0x2, 0x8, 0x7, 0x5, 0x1]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r3, 0xae80, 0x0) 08:42:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x1ff}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r2, 0xae80, 0x4) [ 1097.338630][ T9115] XFS (loop2): Invalid superblock magic number 08:42:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) 08:42:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r4 = gettid() process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) 08:42:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) [ 1097.785761][ T9603] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000240)=""/51, 0x33}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x1ff}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r2, 0xae80, 0x4) 08:42:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) 08:42:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ed, 0x0, 0x0, 0x0, 0x8001}, [@map={0x18, 0xf, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x35}]}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0xab, &(0x7f0000000240)=""/171, 0x41f00, 0x1, [], r3, 0xa}, 0x48) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) [ 1098.079280][ T9775] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) [ 1098.161489][ T9595] XFS (loop4): Invalid superblock magic number 08:42:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x1ff}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r2, 0xae80, 0x4) [ 1098.367419][ T9673] XFS (loop2): Invalid superblock magic number 08:42:19 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000000)=0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) msgget$private(0x0, 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x0, 0x80000001, 0x40, 0x2, 0x8, 0x7, 0x5, 0x1]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r3, 0xae80, 0x0) 08:42:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) 08:42:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x1, 0x0) write$apparmor_current(r2, &(0x7f00000000c0)=@profile={'changeprofile ', '/dev/kvm\x00'}, 0x17) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) 08:42:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r4 = gettid() process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:19 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) 08:42:19 executing program 0 (fault-call:2 fault-nth:0): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1098.719098][T10031] FAULT_INJECTION: forcing a failure. [ 1098.719098][T10031] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.732107][T10031] CPU: 0 PID: 10031 Comm: syz-executor.0 Not tainted 5.1.0-rc2-next-20190327 #12 [ 1098.741230][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1098.751297][T10031] Call Trace: [ 1098.754648][T10031] dump_stack+0x172/0x1f0 [ 1098.759013][T10031] should_fail.cold+0xa/0x15 [ 1098.763616][T10031] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1098.769439][T10031] ? __mutex_lock+0x3cd/0x1310 [ 1098.774318][T10031] __should_failslab+0x121/0x190 [ 1098.779264][T10031] should_failslab+0x9/0x14 [ 1098.783755][T10031] kmem_cache_alloc+0x47/0x6f0 [ 1098.788530][T10031] __build_skb+0x3e/0x310 [ 1098.792844][T10031] __napi_alloc_skb+0x1d2/0x300 [ 1098.797707][T10031] napi_get_frags+0x65/0x140 [ 1098.802351][T10031] tun_get_user+0x1706/0x3fb0 [ 1098.805137][T10097] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1098.807040][T10031] ? lock_downgrade+0x880/0x880 [ 1098.819018][T10031] ? tun_build_skb.isra.0+0x12f0/0x12f0 [ 1098.824551][T10031] ? tun_get+0x171/0x290 [ 1098.828798][T10031] ? lock_downgrade+0x880/0x880 [ 1098.833652][T10031] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1098.839917][T10031] ? kasan_check_read+0x11/0x20 [ 1098.844782][T10031] tun_chr_write_iter+0xbd/0x156 [ 1098.849752][T10031] do_iter_readv_writev+0x5e1/0x8e0 [ 1098.854966][T10031] ? vfs_dedupe_file_range+0x780/0x780 [ 1098.860430][T10031] ? apparmor_file_permission+0x25/0x30 [ 1098.865993][T10031] ? rw_verify_area+0x118/0x360 [ 1098.870874][T10031] do_iter_write+0x184/0x610 [ 1098.875555][T10031] ? dup_iter+0x260/0x260 [ 1098.879976][T10031] vfs_writev+0x1b3/0x2f0 [ 1098.884308][T10031] ? vfs_iter_write+0xb0/0xb0 [ 1098.888978][T10031] ? kasan_check_read+0x11/0x20 [ 1098.893836][T10031] ? ksys_dup3+0x3e0/0x3e0 [ 1098.898253][T10031] ? wait_for_completion+0x440/0x440 [ 1098.903524][T10031] ? __fget_light+0x1a9/0x230 [ 1098.908272][T10031] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1098.914532][T10031] do_writev+0xf6/0x290 [ 1098.918696][T10031] ? vfs_writev+0x2f0/0x2f0 [ 1098.923223][T10031] ? do_syscall_64+0x26/0x610 [ 1098.927907][T10031] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1098.934075][T10031] ? do_syscall_64+0x26/0x610 [ 1098.938779][T10031] __x64_sys_writev+0x75/0xb0 [ 1098.943468][T10031] do_syscall_64+0x103/0x610 [ 1098.948071][T10031] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1098.953954][T10031] RIP: 0033:0x4580c1 [ 1098.957832][T10031] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b9 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 1098.977427][T10031] RSP: 002b:00007efe6aa81ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 1098.985842][T10031] RAX: ffffffffffffffda RBX: 000000000000003e RCX: 00000000004580c1 [ 1098.993794][T10031] RDX: 0000000000000001 RSI: 00007efe6aa81c00 RDI: 00000000000000f0 [ 1099.001748][T10031] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1099.009699][T10031] R10: 0000000000000064 R11: 0000000000000293 R12: 00007efe6aa826d4 [ 1099.017654][T10031] R13: 00000000004c6848 R14: 00000000004dbd70 R15: 0000000000000004 08:42:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000240)=""/51, 0x33}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:19 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) 08:42:19 executing program 0 (fault-call:2 fault-nth:1): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:19 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) [ 1099.203743][T10186] FAULT_INJECTION: forcing a failure. [ 1099.203743][T10186] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.216789][T10186] CPU: 0 PID: 10186 Comm: syz-executor.0 Not tainted 5.1.0-rc2-next-20190327 #12 [ 1099.225909][T10186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1099.235981][T10186] Call Trace: [ 1099.239274][T10186] dump_stack+0x172/0x1f0 [ 1099.243599][T10186] should_fail.cold+0xa/0x15 [ 1099.243632][T10186] ? fault_create_debugfs_attr+0x1e0/0x1e0 08:42:19 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000000)=0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) msgget$private(0x0, 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x0, 0x80000001, 0x40, 0x2, 0x8, 0x7, 0x5, 0x1]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaade4, 0x0, 0x0, 0xfffffd53) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1099.254021][T10186] __should_failslab+0x121/0x190 [ 1099.254041][T10186] should_failslab+0x9/0x14 [ 1099.254058][T10186] kmem_cache_alloc+0x47/0x6f0 [ 1099.254144][T10186] dst_alloc+0x10e/0x200 [ 1099.254201][T10186] ip6_dst_alloc+0x34/0xa0 [ 1099.254221][T10186] ip6_pol_route+0x73c/0x1040 [ 1099.282615][T10186] ? ip6_pol_route_lookup+0xae0/0xae0 [ 1099.288619][T10186] ? skb_send_sock_locked+0x810/0x810 [ 1099.294007][T10186] ? rt6_multipath_hash+0x1ba/0xe40 [ 1099.299224][T10186] ip6_pol_route_input+0x65/0x80 [ 1099.304300][T10186] fib6_rule_lookup+0x128/0x560 [ 1099.309207][T10186] ? ip6t_do_table+0xd8b/0x1cd0 [ 1099.314070][T10186] ? trace_hardirqs_on+0x67/0x230 [ 1099.319118][T10186] ? ip6_pol_route+0x1040/0x1040 [ 1099.324071][T10186] ? fib6_lookup+0x360/0x360 [ 1099.328702][T10186] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1099.334951][T10186] ? ip6t_do_table+0xde1/0x1cd0 [ 1099.339853][T10186] ? nf_conntrack_attach+0xd0/0xd0 [ 1099.344959][T10186] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1099.350838][T10186] ip6_route_input_lookup+0xb7/0xd0 [ 1099.356113][T10186] ip6_route_input+0x5e2/0x9e0 [ 1099.360878][T10186] ? ip6_route_info_create+0x2a30/0x2a30 [ 1099.366541][T10186] ? nf_nat_icmpv6_reply_translation+0x6b0/0x6b0 [ 1099.372872][T10186] ? nf_conntrack_update+0x960/0x960 [ 1099.378221][T10186] ip6_rcv_finish_core.isra.0+0x174/0x590 [ 1099.384063][T10186] ip6_rcv_finish+0x17d/0x320 [ 1099.388739][T10186] ipv6_rcv+0x10e/0x420 [ 1099.392878][T10186] ? ip6_rcv_core.isra.0+0x1c00/0x1c00 [ 1099.398324][T10186] ? ip6_rcv_finish_core.isra.0+0x590/0x590 [ 1099.404219][T10186] ? mark_held_locks+0xf0/0xf0 [ 1099.409025][T10186] ? ip6_rcv_core.isra.0+0x1c00/0x1c00 [ 1099.414471][T10186] __netif_receive_skb_one_core+0x115/0x1a0 [ 1099.420345][T10186] ? __netif_receive_skb_core+0x3040/0x3040 [ 1099.426230][T10186] ? lock_acquire+0x16f/0x3f0 [ 1099.430908][T10186] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1099.437149][T10186] __netif_receive_skb+0x2c/0x1c0 [ 1099.442171][T10186] netif_receive_skb_internal+0x117/0x5c0 [ 1099.447873][T10186] ? dev_cpu_dead+0x920/0x920 [ 1099.452559][T10186] ? eth_gro_receive+0x890/0x890 [ 1099.457495][T10186] napi_gro_frags+0xade/0xd10 [ 1099.462172][T10186] tun_get_user+0x2f24/0x3fb0 [ 1099.466851][T10186] ? tun_build_skb.isra.0+0x12f0/0x12f0 [ 1099.472385][T10186] ? tun_get+0x171/0x290 [ 1099.476629][T10186] ? lock_downgrade+0x880/0x880 [ 1099.481476][T10186] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1099.487738][T10186] ? kasan_check_read+0x11/0x20 [ 1099.492576][T10186] tun_chr_write_iter+0xbd/0x156 [ 1099.497503][T10186] do_iter_readv_writev+0x5e1/0x8e0 [ 1099.502687][T10186] ? vfs_dedupe_file_range+0x780/0x780 [ 1099.508135][T10186] ? apparmor_file_permission+0x25/0x30 [ 1099.513699][T10186] ? rw_verify_area+0x118/0x360 [ 1099.518539][T10186] do_iter_write+0x184/0x610 [ 1099.523124][T10186] ? dup_iter+0x260/0x260 [ 1099.527457][T10186] vfs_writev+0x1b3/0x2f0 [ 1099.531788][T10186] ? vfs_iter_write+0xb0/0xb0 [ 1099.531805][T10186] ? kasan_check_read+0x11/0x20 [ 1099.531832][T10186] ? ksys_dup3+0x3e0/0x3e0 [ 1099.531860][T10186] ? wait_for_completion+0x440/0x440 [ 1099.541378][T10186] ? __fget_light+0x1a9/0x230 [ 1099.556334][T10186] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1099.563094][T10186] do_writev+0xf6/0x290 [ 1099.567239][T10186] ? vfs_writev+0x2f0/0x2f0 [ 1099.571732][T10186] ? do_syscall_64+0x26/0x610 [ 1099.576424][T10186] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1099.582501][T10186] ? do_syscall_64+0x26/0x610 [ 1099.587198][T10186] __x64_sys_writev+0x75/0xb0 [ 1099.591874][T10186] do_syscall_64+0x103/0x610 [ 1099.596636][T10186] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1099.602542][T10186] RIP: 0033:0x4580c1 [ 1099.606541][T10186] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b9 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 1099.626229][T10186] RSP: 002b:00007efe6aa81ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 1099.634632][T10186] RAX: ffffffffffffffda RBX: 000000000000003e RCX: 00000000004580c1 [ 1099.642595][T10186] RDX: 0000000000000001 RSI: 00007efe6aa81c00 RDI: 00000000000000f0 08:42:20 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000140)={[{0xfffffffffffffff8, 0x5, 0x7fff, 0x6, 0x5c, 0x80000001, 0x9, 0x401, 0x10000, 0x9fac, 0x2, 0x1, 0x6}, {0x2, 0x1, 0x0, 0x3, 0x6, 0x80000000, 0x7, 0x7f, 0x4, 0x4, 0x0, 0x400, 0x435}, {0x100000001, 0x712, 0xffffffff, 0x4, 0x80000000, 0x3, 0x7ff, 0x7fffffff, 0x3, 0x7f, 0x5, 0xc8, 0x80000001}], 0x8000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)) [ 1099.650576][T10186] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1099.658573][T10186] R10: 0000000000000064 R11: 0000000000000293 R12: 00007efe6aa826d4 [ 1099.666541][T10186] R13: 00000000004c6848 R14: 00000000004dbd70 R15: 0000000000000004 08:42:20 executing program 0 (fault-call:2 fault-nth:2): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1099.817203][T10209] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:20 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r0, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) [ 1099.900464][T10253] FAULT_INJECTION: forcing a failure. [ 1099.900464][T10253] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.913488][T10253] CPU: 1 PID: 10253 Comm: syz-executor.0 Not tainted 5.1.0-rc2-next-20190327 #12 [ 1099.922642][T10253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1099.932714][T10253] Call Trace: [ 1099.936025][T10253] dump_stack+0x172/0x1f0 [ 1099.940369][T10253] should_fail.cold+0xa/0x15 [ 1099.945074][T10253] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1099.950887][T10253] ? lock_downgrade+0x880/0x880 [ 1099.955749][T10253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1099.962052][T10253] ? kasan_check_read+0x11/0x20 [ 1099.966911][T10253] __should_failslab+0x121/0x190 [ 1099.971860][T10253] should_failslab+0x9/0x14 [ 1099.976394][T10253] kmem_cache_alloc+0x47/0x6f0 [ 1099.981182][T10253] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1099.987441][T10253] ? __raw_v6_lookup+0x3b9/0x490 [ 1099.992389][T10253] skb_clone+0x150/0x3b0 [ 1099.996823][T10253] raw6_local_deliver+0x332/0xae0 [ 1100.001862][T10253] ? rawv6_rcv+0x1150/0x1150 [ 1100.006463][T10253] ? mark_held_locks+0xf0/0xf0 [ 1100.011236][T10253] ? ip6_input+0x229/0x3f0 [ 1100.015662][T10253] ip6_protocol_deliver_rcu+0x365/0x16c0 [ 1100.021308][T10253] ? lock_acquire+0x16f/0x3f0 [ 1100.025997][T10253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1100.032339][T10253] ? rcu_dynticks_curr_cpu_in_eqs+0x50/0xb0 [ 1100.038258][T10253] ip6_input_finish+0x84/0x170 [ 1100.043044][T10253] ip6_input+0xe4/0x3f0 [ 1100.047210][T10253] ? ip6_input_finish+0x170/0x170 [ 1100.052252][T10253] ? ip6_protocol_deliver_rcu+0x16c0/0x16c0 [ 1100.058164][T10253] ? ipv6_chk_mcast_addr+0x2f2/0x6f0 [ 1100.063472][T10253] ip6_mc_input+0x4aa/0xf30 [ 1100.068002][T10253] ? ip6_input+0x3f0/0x3f0 [ 1100.072445][T10253] ip6_rcv_finish+0x1e7/0x320 [ 1100.077134][T10253] ipv6_rcv+0x10e/0x420 [ 1100.081296][T10253] ? ip6_rcv_core.isra.0+0x1c00/0x1c00 [ 1100.086851][T10253] ? ip6_rcv_finish_core.isra.0+0x590/0x590 [ 1100.092750][T10253] ? mark_held_locks+0xf0/0xf0 [ 1100.097517][T10253] ? ip6_rcv_core.isra.0+0x1c00/0x1c00 [ 1100.102975][T10253] __netif_receive_skb_one_core+0x115/0x1a0 [ 1100.108873][T10253] ? __netif_receive_skb_core+0x3040/0x3040 [ 1100.114771][T10253] ? lock_acquire+0x16f/0x3f0 [ 1100.119538][T10253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1100.125793][T10253] __netif_receive_skb+0x2c/0x1c0 [ 1100.130831][T10253] netif_receive_skb_internal+0x117/0x5c0 [ 1100.136669][T10253] ? dev_cpu_dead+0x920/0x920 [ 1100.141459][T10253] ? eth_gro_receive+0x890/0x890 [ 1100.146702][T10253] napi_gro_frags+0xade/0xd10 [ 1100.151922][T10253] tun_get_user+0x2f24/0x3fb0 [ 1100.157159][T10253] ? tun_build_skb.isra.0+0x12f0/0x12f0 [ 1100.162712][T10253] ? tun_get+0x171/0x290 [ 1100.167006][T10253] ? lock_downgrade+0x880/0x880 [ 1100.171865][T10253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1100.178120][T10253] ? kasan_check_read+0x11/0x20 [ 1100.183003][T10253] tun_chr_write_iter+0xbd/0x156 [ 1100.187951][T10253] do_iter_readv_writev+0x5e1/0x8e0 [ 1100.193161][T10253] ? vfs_dedupe_file_range+0x780/0x780 [ 1100.198637][T10253] ? apparmor_file_permission+0x25/0x30 [ 1100.204207][T10253] ? rw_verify_area+0x118/0x360 [ 1100.209066][T10253] do_iter_write+0x184/0x610 [ 1100.213666][T10253] ? dup_iter+0x260/0x260 [ 1100.218012][T10253] vfs_writev+0x1b3/0x2f0 [ 1100.222352][T10253] ? vfs_iter_write+0xb0/0xb0 [ 1100.227033][T10253] ? kasan_check_read+0x11/0x20 [ 1100.231907][T10253] ? ksys_dup3+0x3e0/0x3e0 [ 1100.236336][T10253] ? wait_for_completion+0x440/0x440 [ 1100.241638][T10253] ? __fget_light+0x1a9/0x230 [ 1100.246323][T10253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1100.252572][T10253] do_writev+0xf6/0x290 [ 1100.256737][T10253] ? vfs_writev+0x2f0/0x2f0 [ 1100.261248][T10253] ? do_syscall_64+0x26/0x610 [ 1100.265931][T10253] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1100.272012][T10253] ? do_syscall_64+0x26/0x610 [ 1100.276712][T10253] __x64_sys_writev+0x75/0xb0 [ 1100.281411][T10253] do_syscall_64+0x103/0x610 [ 1100.286046][T10253] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1100.291955][T10253] RIP: 0033:0x4580c1 [ 1100.295883][T10253] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b9 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 1100.315502][T10253] RSP: 002b:00007efe6aa81ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 1100.323928][T10253] RAX: ffffffffffffffda RBX: 000000000000003e RCX: 00000000004580c1 [ 1100.331918][T10253] RDX: 0000000000000001 RSI: 00007efe6aa81c00 RDI: 00000000000000f0 [ 1100.339911][T10253] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 08:42:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2462, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) [ 1100.347999][T10253] R10: 0000000000000064 R11: 0000000000000293 R12: 00007efe6aa826d4 [ 1100.355979][T10253] R13: 00000000004c6848 R14: 00000000004dbd70 R15: 0000000000000004 [ 1100.525206][T10195] XFS (loop2): Invalid superblock magic number 08:42:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r3, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r4 = gettid() process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r3, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:21 executing program 0 (fault-call:2 fault-nth:3): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:21 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r0, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) [ 1100.777164][T10553] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1100.863817][T10548] XFS (loop4): Invalid superblock magic number 08:42:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:21 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1}) 08:42:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) 08:42:21 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r0, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) 08:42:21 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:21 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0xd, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1100.986765][T10568] usb usb3: check_ctrlrecip: process 10568 (syz-executor.1) requesting ep 01 but needs 81 08:42:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) [ 1101.051966][T10568] usb usb3: usbfs: process 10568 (syz-executor.1) did not claim interface 0 before use 08:42:21 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1}) 08:42:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) [ 1101.191038][T10699] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) 08:42:21 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x140, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1101.424228][T10800] usb usb3: check_ctrlrecip: process 10800 (syz-executor.1) requesting ep 01 but needs 81 [ 1101.489495][T10800] usb usb3: usbfs: process 10800 (syz-executor.1) did not claim interface 0 before use [ 1101.506104][T10625] XFS (loop2): Invalid superblock magic number [ 1101.593876][T11014] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1101.751426][T10877] XFS (loop4): Invalid superblock magic number 08:42:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) 08:42:22 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x2, &(0x7f00000000c0)={0x102, 0x1}) 08:42:22 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x480, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=0x0, &(0x7f0000000140)=0xffffffcc) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r3, 0x4) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0xefe2}]}) 08:42:22 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r0, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) 08:42:22 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x5421, &(0x7f00000000c0)={0x102, 0x1}) 08:42:22 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x2000007e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1102.144562][T11224] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:22 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r0, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) 08:42:22 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x1) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000340)={&(0x7f0000ffe000/0x1000)=nil, 0x8, 0x7, 0x81, &(0x7f0000ffb000/0x3000)=nil, 0xd582}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x2, &(0x7f0000ffc000/0x1000)=nil, 0xff}) fadvise64(r0, 0x0, 0x5, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000380)={0xcc, 0xac29, 0x4, 0x9, 0x2, 0xfffffffffffffffd}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000300)={0xfff, 0x7, 0x0, 0x48, &(0x7f0000000100)=""/72, 0x8c, &(0x7f0000000240)=""/140, 0x55, &(0x7f0000000180)=""/85}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0x12}, 0x7}], 0x1c) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{0x0, 0xffffffffbe65183e, 0x0, 0x3f}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}], 0xfffffffffffffffc}) 08:42:22 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x5450, &(0x7f00000000c0)={0x102, 0x1}) [ 1102.400017][T11105] XFS (loop2): Invalid superblock magic number [ 1102.426825][T11410] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1102.621399][T11345] XFS (loop4): Invalid superblock magic number 08:42:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:23 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x7ffff000, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:23 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x5451, &(0x7f00000000c0)={0x102, 0x1}) 08:42:23 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r0, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) 08:42:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 08:42:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) 08:42:23 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x5452, &(0x7f00000000c0)={0x102, 0x1}) 08:42:23 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0xfffffdef, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) [ 1103.104763][T11717] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000000c0)) 08:42:23 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x5460, &(0x7f00000000c0)={0x102, 0x1}) 08:42:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) [ 1103.381960][T11919] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1103.442886][T11504] XFS (loop2): Invalid superblock magic number [ 1103.633047][T11803] XFS (loop4): Invalid superblock magic number 08:42:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:24 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x550b, &(0x7f00000000c0)={0x102, 0x1}) 08:42:24 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) 08:42:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f00000001c0)=0xc) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000002c0)=0x3, 0x4) fcntl$setown(r0, 0x8, r2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x1}) r4 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x80) read$rfkill(r4, &(0x7f0000000200), 0x8) socket$inet6(0xa, 0xa, 0xafb) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x800fd, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000100)={0x18, 0xd, 0x1, {{0x38, 0x1, 0x3}, 0x100000000}}, 0x18) 08:42:24 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x5514, &(0x7f00000000c0)={0x102, 0x1}) 08:42:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) 08:42:24 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x2, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1104.105680][T12263] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r2 = gettid() process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:24 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x551f, &(0x7f00000000c0)={0x102, 0x1}) 08:42:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) 08:42:24 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000000)) [ 1104.410991][T12165] XFS (loop2): Invalid superblock magic number [ 1104.418436][T12416] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1104.626032][T12320] XFS (loop4): Invalid superblock magic number 08:42:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:25 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550c, &(0x7f00000000c0)={0x102, 0x1}) 08:42:25 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x3, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) 08:42:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)) 08:42:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) 08:42:25 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x4, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r2 = gettid() process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) [ 1105.118720][T12755] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:25 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000080)=@un=@abs, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)=""/231, 0xe7}], 0x1, &(0x7f0000000180)=""/28, 0x1c}, 0x928}, {{&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f00000001c0)=""/59, 0x3b}, {&(0x7f00000004c0)=""/148, 0x94}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000000600)=""/31, 0x1f}, {&(0x7f0000000640)=""/63, 0x3f}, {&(0x7f0000000680)=""/176, 0xb0}, {&(0x7f0000000740)=""/253, 0xfd}, {&(0x7f0000000840)=""/103, 0x67}, {&(0x7f00000008c0)=""/98, 0x62}], 0xa, &(0x7f0000000a00)=""/176, 0xb0}}, {{&(0x7f0000000ac0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000b40)=""/54, 0x36}, {&(0x7f0000000b80)=""/135, 0x87}, {&(0x7f0000000c40)=""/188, 0xbc}, {&(0x7f0000000d00)=""/231, 0xe7}, {&(0x7f0000000e00)=""/131, 0x83}, {&(0x7f0000000ec0)=""/175, 0xaf}, {&(0x7f0000000f80)=""/102, 0x66}, {&(0x7f0000001000)=""/98, 0x62}], 0x8, &(0x7f0000001100)=""/117, 0x75}, 0x401}, {{&(0x7f0000001180)=@isdn, 0x80, &(0x7f0000002200)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1}}], 0x4, 0x40, &(0x7f0000002340)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002380)={'nr0\x00', r1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000023c0)='/dev/vsock\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000002400)=0x9) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000000)) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000002440)=0x9, 0x4) 08:42:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) 08:42:25 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x5, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1105.348080][T12709] XFS (loop2): Invalid superblock magic number [ 1105.357109][T12883] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) r2 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_RESERVED(r2, 0x5601, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) [ 1105.667811][T12809] XFS (loop4): Invalid superblock magic number 08:42:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={[{0x80ffff}]}) 08:42:26 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x6, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) write$P9_RLOPEN(r2, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x0, 0x1, 0x2}, 0x7fff}}, 0x18) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) 08:42:26 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550d, &(0x7f00000000c0)={0x102, 0x1}) 08:42:26 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004551e, &(0x7f00000000c0)={0x102, 0x1}) 08:42:26 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x7, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r2 = gettid() process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0xae71, 0x0) 08:42:26 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x40049409, &(0x7f00000000c0)={0x102, 0x1}) 08:42:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0xfffffffffffffffc}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)) fsetxattr$security_smack_transmute(r0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x3) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) [ 1106.223267][T13543] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1106.377023][T13764] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1106.384802][T13441] XFS (loop2): Invalid superblock magic number 08:42:27 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550c, &(0x7f00000000c0)={0x102, 0x1}) [ 1106.602149][T13570] XFS (loop4): Invalid superblock magic number 08:42:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{0x0}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:27 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x8, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0xae71, 0x0) 08:42:27 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)) 08:42:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0xae71, 0x0) 08:42:27 executing program 3: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40842, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)) 08:42:27 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x12, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r1}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) [ 1107.079590][T14115] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1107.283594][T14278] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 08:42:27 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x30b, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1107.357533][T14021] XFS (loop2): Invalid superblock magic number 08:42:28 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550d, &(0x7f00000000c0)={0x102, 0x1}) [ 1107.486086][T14142] XFS (loop4): Invalid superblock magic number 08:42:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000000)) 08:42:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r2 = gettid() process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:28 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x40085511, &(0x7f00000000c0)={0x102, 0x1}) 08:42:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{0x0}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:28 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0xf000, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:28 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x4020940d, &(0x7f00000000c0)={0x102, 0x1}) 08:42:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r1}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) [ 1108.031410][T14733] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:28 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f00000000c0)={0x102, 0x1}) 08:42:28 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0xffffff1f, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1108.206016][T14820] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1108.245715][T14608] XFS (loop2): Invalid superblock magic number 08:42:28 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f00000000c0)={0x102, 0x1}) 08:42:28 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x1000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:28 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045505, &(0x7f00000000c0)={0x102, 0x1}) [ 1108.473237][T14767] XFS (loop4): Invalid superblock magic number [ 1108.497401][T15068] usb usb3: usbfs: interface 0 claimed by hub while 'syz-executor.1' sets config #258 08:42:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r2 = gettid() process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:29 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004550f, &(0x7f00000000c0)={0x102, 0x1}) 08:42:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{0x0}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:29 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x2000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:29 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045510, &(0x7f00000000c0)={0x102, 0x1}) 08:42:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:29 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x4000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:29 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045515, &(0x7f00000000c0)={0x102, 0x1}) 08:42:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r1}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:29 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f00000000c0)={0x102, 0x1}) [ 1109.183716][T15295] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:29 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x6000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r2 = gettid() process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) [ 1109.467302][T15628] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:30 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045519, &(0x7f00000000c0)={0x102, 0x1}) [ 1109.524004][T15278] XFS (loop2): Invalid superblock magic number 08:42:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1109.751948][T15602] XFS (loop4): Invalid superblock magic number 08:42:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:30 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x11000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:30 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f00000000c0)={0x102, 0x1}) 08:42:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r1}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:30 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x80085504, &(0x7f00000000c0)={0x102, 0x1}) 08:42:30 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x21000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1110.253839][T16065] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r1}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:30 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008550e, &(0x7f00000000c0)={0x102, 0x1}) 08:42:31 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551c, &(0x7f00000000c0)={0x102, 0x1}) 08:42:31 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x29000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1110.522408][T16304] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1110.559819][T16070] XFS (loop2): Invalid superblock magic number 08:42:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r1}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:31 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551d, &(0x7f00000000c0)={0x102, 0x1}) [ 1110.809725][T16226] XFS (loop4): Invalid superblock magic number 08:42:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r1}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:31 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f00000000c0)={0x102, 0x1}) 08:42:31 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x2b000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:31 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f00000000c0)={0x102, 0x1}) [ 1111.251734][T16718] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r1}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:31 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x2c000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:31 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f00000000c0)={0x102, 0x1}) 08:42:32 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f00000000c0)={0x102, 0x1}) [ 1111.558097][T16959] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1111.616778][T16603] XFS (loop2): Invalid superblock magic number 08:42:32 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x2f000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:32 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0045878, &(0x7f00000000c0)={0x102, 0x1}) [ 1111.909507][T16892] XFS (loop4): Invalid superblock magic number 08:42:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r1}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:32 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0045878, &(0x7f00000000c0)={0x102, 0x1}) 08:42:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:32 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x33000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:32 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc00c5512, &(0x7f00000000c0)={0x102, 0x1}) [ 1112.287126][T17225] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r1}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:32 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000002}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:32 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105500, &(0x7f00000000c0)={0x102, 0x1}) 08:42:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000003}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1112.420618][T17140] XFS (loop2): Invalid superblock magic number [ 1112.576508][T17558] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:33 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105502, &(0x7f00000000c0)={0x102, 0x1}) 08:42:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000004}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1112.866834][T17551] XFS (loop4): Invalid superblock magic number 08:42:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}], 0x8, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:33 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f00000000c0)={0x102, 0x1}) 08:42:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000005}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1113.139387][T17795] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1113.140613][T17794] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 4, id = 0 08:42:33 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0182500, &(0x7f00000000c0)={0x102, 0x1}) 08:42:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r1}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:34 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, &(0x7f00000000c0)={0x102, 0x1}) 08:42:34 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000006}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1113.430047][T17783] XFS (loop2): Invalid superblock magic number 08:42:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:34 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185503, &(0x7f00000000c0)={0x102, 0x1}) 08:42:34 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000007}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1113.621664][T18215] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1113.828195][T18135] XFS (loop4): Invalid superblock magic number 08:42:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}], 0x8, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:34 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185504, &(0x7f00000000c0)={0x102, 0x1}) 08:42:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r1}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:34 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000008}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:34 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185505, &(0x7f00000000c0)={0x102, 0x1}) 08:42:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r1}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:35 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a00000b}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:35 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185506, &(0x7f00000000c0)={0x102, 0x1}) [ 1114.463436][T18668] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:35 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185507, &(0x7f00000000c0)={0x102, 0x1}) [ 1114.665774][T18639] XFS (loop2): Invalid superblock magic number [ 1114.709401][T18785] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:35 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc018550a, &(0x7f00000000c0)={0x102, 0x1}) 08:42:35 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a00000d}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1115.078479][T18715] XFS (loop4): Invalid superblock magic number 08:42:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}], 0x8, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:35 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185548, &(0x7f00000000c0)={0x102, 0x1}) 08:42:35 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000028}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r1}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:35 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000007}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:35 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc018554c, &(0x7f00000000c0)={0x102, 0x1}) [ 1115.486395][T19125] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:36 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r0}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r2 = gettid() process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}], 0x8, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:36 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185560, &(0x7f00000000c0)={0x102, 0x1}) 08:42:36 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000030}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1115.672758][T19046] XFS (loop2): Invalid superblock magic number [ 1115.785663][T19330] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:36 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185568, &(0x7f00000000c0)={0x102, 0x1}) 08:42:36 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a00003a}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1116.138398][T19261] XFS (loop4): Invalid superblock magic number 08:42:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {0x0}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r1}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:36 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc018556c, &(0x7f00000000c0)={0x102, 0x1}) 08:42:36 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a0000f0}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:36 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185574, &(0x7f00000000c0)={0x102, 0x1}) 08:42:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}], 0x8, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1116.455685][T19723] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:37 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc018557a, &(0x7f00000000c0)={0x102, 0x1}) 08:42:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r0}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r2 = gettid() process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:37 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000300}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:37 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0186c00, &(0x7f00000000c0)={0x102, 0x1}) [ 1116.845674][T19929] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:37 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0186f00, &(0x7f00000000c0)={0x102, 0x1}) [ 1116.897840][T19621] XFS (loop2): Invalid superblock magic number 08:42:37 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000028}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1117.283704][T19860] XFS (loop4): Invalid superblock magic number 08:42:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {0x0}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:37 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000500}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:37 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0189436, &(0x7f00000000c0)={0x102, 0x1}) 08:42:37 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc018d003, &(0x7f00000000c0)={0x102, 0x1}) 08:42:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}], 0x8, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:37 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000543}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1117.673377][T20435] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r0}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r2 = gettid() process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:38 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc020660b, &(0x7f00000000c0)={0x102, 0x1}) 08:42:38 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000600}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:38 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x103, 0x1}) [ 1117.945946][T20599] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1117.995975][T20317] XFS (loop2): Invalid superblock magic number [ 1118.089032][T20663] vhci_hcd: default hub control req: 0301 v0000 i0001 l0 [ 1118.333494][T20578] XFS (loop4): Invalid superblock magic number [ 1118.354576][T20578] BUG: MAX_STACK_TRACE_ENTRIES too low! [ 1118.360200][T20578] turning off the locking correctness validator. [ 1118.366538][T20578] CPU: 1 PID: 20578 Comm: syz-executor.4 Not tainted 5.1.0-rc2-next-20190327 #12 [ 1118.375658][T20578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1118.385722][T20578] Call Trace: [ 1118.389028][T20578] dump_stack+0x172/0x1f0 [ 1118.393364][T20578] save_trace.cold+0x14/0x19 [ 1118.397959][T20578] mark_lock+0x2fb/0x1380 [ 1118.402293][T20578] __lock_acquire+0xf2c/0x3fb0 [ 1118.407061][T20578] ? kasan_slab_free+0xe/0x10 [ 1118.411737][T20578] ? kmem_cache_free+0x86/0x260 [ 1118.416655][T20578] ? xfs_buf_free+0x306/0x650 [ 1118.421418][T20578] ? xfs_buf_rele+0x1072/0x15b0 [ 1118.426312][T20578] ? xfs_readsb+0x397/0x530 [ 1118.430818][T20578] ? xfs_fs_fill_super+0x879/0x1670 [ 1118.436024][T20578] ? mount_bdev+0x307/0x3c0 [ 1118.440528][T20578] ? xfs_fs_mount+0x35/0x40 [ 1118.445031][T20578] ? legacy_get_tree+0xf2/0x200 [ 1118.449886][T20578] ? mark_held_locks+0xf0/0xf0 [ 1118.454670][T20578] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1118.460144][T20578] lock_acquire+0x16f/0x3f0 [ 1118.466220][T20578] ? flush_workqueue+0xf7/0x14c0 [ 1118.471165][T20578] flush_workqueue+0x126/0x14c0 [ 1118.476023][T20578] ? flush_workqueue+0xf7/0x14c0 [ 1118.481135][T20578] ? lock_downgrade+0x880/0x880 [ 1118.485984][T20578] ? trace_hardirqs_on_caller+0x6a/0x220 [ 1118.491630][T20578] ? pwq_unbound_release_workfn+0x2f0/0x2f0 [ 1118.497531][T20578] ? trace_hardirqs_on_caller+0x6a/0x220 [ 1118.503167][T20578] drain_workqueue+0x1b4/0x470 [ 1118.507950][T20578] ? drain_workqueue+0x1b4/0x470 [ 1118.512892][T20578] destroy_workqueue+0x21/0x700 [ 1118.517758][T20578] ? xfs_destroy_mount_workqueues+0xd/0x1c0 [ 1118.523661][T20578] xfs_destroy_mount_workqueues+0x3b/0x1c0 [ 1118.529473][T20578] xfs_fs_fill_super+0x8e9/0x1670 [ 1118.534525][T20578] ? xfs_test_remount_options+0x90/0x90 [ 1118.540070][T20578] mount_bdev+0x307/0x3c0 [ 1118.544401][T20578] ? xfs_test_remount_options+0x90/0x90 [ 1118.549950][T20578] xfs_fs_mount+0x35/0x40 [ 1118.554296][T20578] ? xfs_finish_flags+0x490/0x490 [ 1118.559429][T20578] legacy_get_tree+0xf2/0x200 [ 1118.564114][T20578] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 1118.569661][T20578] vfs_get_tree+0x123/0x450 [ 1118.574160][T20578] do_mount+0x1436/0x2c40 [ 1118.578488][T20578] ? copy_mount_string+0x40/0x40 [ 1118.583421][T20578] ? copy_mount_options+0x1ea/0x3a0 [ 1118.588632][T20578] ? __sanitizer_cov_trace_pc+0x18/0x50 [ 1118.594177][T20578] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1118.600422][T20578] ? copy_mount_options+0x280/0x3a0 [ 1118.605634][T20578] ksys_mount+0xdb/0x150 [ 1118.609892][T20578] __x64_sys_mount+0xbe/0x150 [ 1118.614583][T20578] do_syscall_64+0x103/0x610 [ 1118.619179][T20578] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1118.625158][T20578] RIP: 0033:0x45ac7a [ 1118.629229][T20578] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2d 8e fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0a 8e fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1118.648853][T20578] RSP: 002b:00007f0751343a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1118.657280][T20578] RAX: ffffffffffffffda RBX: 00007f0751343b40 RCX: 000000000045ac7a [ 1118.665264][T20578] RDX: 00007f0751343ae0 RSI: 0000000020002ac0 RDI: 00007f0751343b00 [ 1118.673241][T20578] RBP: 0000000000000001 R08: 00007f0751343b40 R09: 00007f0751343ae0 [ 1118.681214][T20578] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1118.689216][T20578] R13: 00000000004c6b80 R14: 00000000004dc190 R15: 00000000ffffffff [ 1118.714247][ T3878] kobject: 'loop4' (0000000070d902db): kobject_uevent_env [ 1118.721421][ T3878] kobject: 'loop4' (0000000070d902db): fill_kobj_path: path = '/devices/virtual/block/loop4' 08:42:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {0x0}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:39 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000608}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:39 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x109, 0x1}) 08:42:39 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000543}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1118.785592][ T3878] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1118.793230][ T3878] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' 08:42:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {0x0}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:39 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000689}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1118.843432][ T3878] kobject: 'loop0' (00000000678e7d7a): kobject_uevent_env [ 1118.850950][T20844] vhci_hcd: default hub control req: 0901 v0000 i0001 l0 [ 1118.858497][ T3878] kobject: 'loop0' (00000000678e7d7a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1118.869648][ T7802] kobject: 'loop2' (0000000021ced7f0): kobject_uevent_env [ 1118.881005][ T7802] kobject: 'loop2' (0000000021ced7f0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1118.903885][ T3878] kobject: 'loop1' (0000000030290878): kobject_uevent_env [ 1118.911069][ T3878] kobject: 'loop1' (0000000030290878): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1118.952203][ T7811] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1118.959648][ T7811] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1118.978464][ T3878] kobject: 'loop3' (0000000079482deb): kobject_uevent_env [ 1118.998081][ T3878] kobject: 'loop3' (0000000079482deb): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1119.009873][T20936] kobject: 'loop2' (0000000021ced7f0): kobject_uevent_env [ 1119.017566][T20936] kobject: 'loop2' (0000000021ced7f0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1119.039691][T20972] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:39 executing program 4: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r0}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r2 = gettid() process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:39 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x163, 0x1}) 08:42:39 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000700}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1119.087510][T20943] kobject: 'loop3' (0000000079482deb): kobject_uevent_env [ 1119.099803][T20943] kobject: 'loop3' (0000000079482deb): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1119.126399][T21075] vhci_hcd: default hub control req: 6301 v0000 i0001 l0 [ 1119.149250][T20961] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1119.161160][T20961] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1119.203749][ T7808] kobject: 'loop4' (0000000070d902db): kobject_uevent_env [ 1119.219731][ T7808] kobject: 'loop4' (0000000070d902db): fill_kobj_path: path = '/devices/virtual/block/loop4' 08:42:39 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x16c, 0x1}) [ 1119.251869][ T3878] kobject: 'loop0' (00000000678e7d7a): kobject_uevent_env [ 1119.261681][ T3878] kobject: 'loop0' (00000000678e7d7a): fill_kobj_path: path = '/devices/virtual/block/loop0' 08:42:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {0x0}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1119.334152][T21265] vhci_hcd: default hub control req: 6c01 v0000 i0001 l0 [ 1119.351155][ T3878] kobject: 'loop1' (0000000030290878): kobject_uevent_env [ 1119.359242][ T3878] kobject: 'loop1' (0000000030290878): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1119.401623][T21368] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1119.402031][ T7804] kobject: 'loop3' (0000000079482deb): kobject_uevent_env [ 1119.435989][ T7804] kobject: 'loop3' (0000000079482deb): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1119.457237][T20936] XFS (loop2): Invalid superblock magic number [ 1119.465223][T21268] kobject: 'loop4' (0000000070d902db): kobject_uevent_env [ 1119.473000][ T3878] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1119.477521][T21268] kobject: 'loop4' (0000000070d902db): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1119.480321][ T3878] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1119.562630][T21268] XFS (loop4): Invalid superblock magic number [ 1119.601838][ T7811] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1119.609003][ T7811] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1119.627374][T21374] kobject: 'loop3' (0000000079482deb): kobject_uevent_env [ 1119.635416][T21374] kobject: 'loop3' (0000000079482deb): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1119.734279][ T3878] kobject: 'loop0' (00000000678e7d7a): kobject_uevent_env [ 1119.741458][ T3878] kobject: 'loop0' (00000000678e7d7a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1119.758926][ T3878] kobject: 'loop2' (0000000021ced7f0): kobject_uevent_env [ 1119.769433][ T3878] kobject: 'loop2' (0000000021ced7f0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1119.780489][ T3878] kobject: 'loop3' (0000000079482deb): kobject_uevent_env [ 1119.789397][ T3878] kobject: 'loop3' (0000000079482deb): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1119.821882][ T7804] kobject: 'loop3' (0000000079482deb): kobject_uevent_env 08:42:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002640)=""/95, 0x5f}], 0x8, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {0x0}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:40 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x16f, 0x1}) 08:42:40 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000806}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:40 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x16c, 0x1}) [ 1119.829150][ T7804] kobject: 'loop3' (0000000079482deb): fill_kobj_path: path = '/devices/virtual/block/loop3' 08:42:40 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x1a1, 0x1}) 08:42:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {0x0}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) [ 1119.882873][T21497] vhci_hcd: default hub control req: 6c01 v0000 i0001 l0 [ 1119.891338][T21499] vhci_hcd: default hub control req: 6f01 v0000 i0001 l0 [ 1119.941681][ T7802] kobject: 'loop2' (0000000021ced7f0): kobject_uevent_env [ 1119.948904][ T7802] kobject: 'loop2' (0000000021ced7f0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1119.963786][ T3878] kobject: 'loop2' (0000000021ced7f0): kobject_uevent_env [ 1119.972544][ T3878] kobject: 'loop2' (0000000021ced7f0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1119.993048][T21268] kobject: 'loop4' (0000000070d902db): kobject_uevent_env [ 1120.000433][T21268] kobject: 'loop4' (0000000070d902db): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1120.027765][ T3878] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1120.034067][T21605] usb usb3: usbfs: process 21605 (syz-executor.1) did not claim interface 1 before use [ 1120.053844][ T3878] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1120.065284][T21601] kobject: 'loop3' (0000000079482deb): kobject_uevent_env [ 1120.075536][T21601] kobject: 'loop3' (0000000079482deb): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1120.082294][ T3878] kobject: 'loop1' (0000000030290878): kobject_uevent_env 08:42:40 executing program 4: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r0}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r2 = gettid() process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:40 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000b00}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:40 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x2}) [ 1120.097988][T21608] kobject: 'loop2' (0000000021ced7f0): kobject_uevent_env [ 1120.114529][T21634] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1120.121979][ T3878] kobject: 'loop1' (0000000030290878): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1120.133349][T21608] kobject: 'loop2' (0000000021ced7f0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1120.141787][ T3878] kobject: 'loop0' (00000000678e7d7a): kobject_uevent_env [ 1120.158648][ T3878] kobject: 'loop0' (00000000678e7d7a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1120.185784][ T3878] kobject: 'loop4' (0000000070d902db): kobject_uevent_env [ 1120.209346][T21609] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1120.223575][ T3878] kobject: 'loop4' (0000000070d902db): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1120.237076][T21609] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1120.249781][ T3878] kobject: 'loop1' (0000000030290878): kobject_uevent_env 08:42:40 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x9}) [ 1120.270547][ T3878] kobject: 'loop1' (0000000030290878): fill_kobj_path: path = '/devices/virtual/block/loop1' 08:42:40 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000d00}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1120.328221][ T3878] kobject: 'loop4' (0000000070d902db): kobject_uevent_env [ 1120.348655][T21892] kobject: 'loop4' (0000000070d902db): kobject_uevent_env [ 1120.365239][ T3878] kobject: 'loop4' (0000000070d902db): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1120.381176][T21892] kobject: 'loop4' (0000000070d902db): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1120.418605][T21929] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1120.494404][T21924] kobject: 'loop3' (0000000079482deb): kobject_uevent_env [ 1120.518551][T21924] kobject: 'loop3' (0000000079482deb): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1120.520514][T21608] XFS (loop2): Invalid superblock magic number [ 1120.632111][ T7811] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1120.639445][ T7811] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1120.658171][ T3878] kobject: 'loop0' (00000000678e7d7a): kobject_uevent_env [ 1120.670085][ T3878] kobject: 'loop0' (00000000678e7d7a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1120.696813][T21892] XFS (loop4): Invalid superblock magic number [ 1120.854332][ T3878] kobject: 'loop2' (0000000021ced7f0): kobject_uevent_env [ 1120.861578][ T3878] kobject: 'loop2' (0000000021ced7f0): fill_kobj_path: path = '/devices/virtual/block/loop2' 08:42:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002640)=""/95, 0x5f}], 0x8, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:41 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x10}) 08:42:41 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000e80}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:41 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r0}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r2 = gettid() process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {0x0}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:41 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x12}) [ 1120.962201][ T7802] kobject: 'loop2' (0000000021ced7f0): kobject_uevent_env [ 1120.969373][ T7802] kobject: 'loop2' (0000000021ced7f0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1120.999153][T22056] kobject: 'loop3' (0000000079482deb): kobject_uevent_env [ 1121.010871][T22056] kobject: 'loop3' (0000000079482deb): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1121.031764][ T3878] kobject: 'loop1' (0000000030290878): kobject_uevent_env [ 1121.038924][ T3878] kobject: 'loop1' (0000000030290878): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1121.055227][T22224] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:41 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a002800}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1121.061049][T22062] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1121.076447][T22062] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' 08:42:41 executing program 4: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r0}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r2 = gettid() process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:41 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x63}) [ 1121.107939][ T3878] kobject: 'loop4' (0000000070d902db): kobject_uevent_env [ 1121.129766][ T3878] kobject: 'loop4' (0000000070d902db): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1121.158661][T22121] kobject: 'loop2' (0000000021ced7f0): kobject_uevent_env [ 1121.168721][T22121] kobject: 'loop2' (0000000021ced7f0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1121.195611][ T3878] kobject: 'loop0' (00000000678e7d7a): kobject_uevent_env 08:42:41 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x67}) 08:42:41 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a003000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1121.224353][ T7808] kobject: 'loop4' (0000000070d902db): kobject_uevent_env [ 1121.245398][ T3878] kobject: 'loop0' (00000000678e7d7a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1121.255736][ T7808] kobject: 'loop4' (0000000070d902db): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1121.321845][ T3878] kobject: 'loop1' (0000000030290878): kobject_uevent_env [ 1121.329047][ T3878] kobject: 'loop1' (0000000030290878): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1121.392347][T22484] kobject: 'loop4' (0000000070d902db): kobject_uevent_env [ 1121.444680][T22484] kobject: 'loop4' (0000000070d902db): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1121.467535][ T3878] kobject: 'loop3' (0000000079482deb): kobject_uevent_env [ 1121.476917][ T3878] kobject: 'loop3' (0000000079482deb): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1121.487879][T22497] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 08:42:42 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x6c}) [ 1121.500139][T22121] XFS (loop2): Invalid superblock magic number [ 1121.547564][ T3878] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1121.555348][ T3878] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1121.571871][T22545] kobject: 'loop3' (0000000079482deb): kobject_uevent_env [ 1121.579081][T22545] kobject: 'loop3' (0000000079482deb): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1121.595609][ T3878] kobject: 'loop1' (0000000030290878): kobject_uevent_env [ 1121.607768][ T3878] kobject: 'loop1' (0000000030290878): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1121.634942][ T3878] kobject: 'loop0' (00000000678e7d7a): kobject_uevent_env [ 1121.647956][ T3878] kobject: 'loop0' (00000000678e7d7a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1121.659300][ T3878] kobject: 'loop0' (00000000678e7d7a): kobject_uevent_env [ 1121.667468][ T3878] kobject: 'loop0' (00000000678e7d7a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1121.678439][T22601] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1121.685683][T22601] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1121.701655][T22484] XFS (loop4): Invalid superblock magic number [ 1121.804576][ T3878] kobject: 'loop2' (0000000021ced7f0): kobject_uevent_env [ 1121.811829][ T3878] kobject: 'loop2' (0000000021ced7f0): fill_kobj_path: path = '/devices/virtual/block/loop2' 08:42:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002640)=""/95, 0x5f}], 0x8, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:42 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r0}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r2 = gettid() process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:42 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a003580}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:42 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x6f}) 08:42:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {0x0}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:42 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x300}) [ 1121.941947][ T7802] kobject: 'loop2' (0000000021ced7f0): kobject_uevent_env [ 1121.949090][ T7802] kobject: 'loop2' (0000000021ced7f0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1121.969551][T22618] kobject: 'loop3' (0000000079482deb): kobject_uevent_env 08:42:42 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a003a00}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1121.979904][T22618] kobject: 'loop3' (0000000079482deb): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1122.011907][ T3878] kobject: 'loop0' (00000000678e7d7a): kobject_uevent_env [ 1122.025736][ T3878] kobject: 'loop0' (00000000678e7d7a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1122.072661][T22484] kobject: 'loop4' (0000000070d902db): kobject_uevent_env [ 1122.080152][T22484] kobject: 'loop4' (0000000070d902db): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1122.098318][ T3878] kobject: 'loop1' (0000000030290878): kobject_uevent_env [ 1122.128477][T22934] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1122.158222][ T3878] kobject: 'loop1' (0000000030290878): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1122.195053][T22931] kobject: 'loop2' (0000000021ced7f0): kobject_uevent_env [ 1122.224158][ T3878] kobject: 'loop4' (0000000070d902db): kobject_uevent_env 08:42:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r1}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:42 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x379}) 08:42:42 executing program 5: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r0}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r2 = gettid() process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) [ 1122.247157][ T3878] kobject: 'loop4' (0000000070d902db): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1122.259878][T22931] kobject: 'loop2' (0000000021ced7f0): fill_kobj_path: path = '/devices/virtual/block/loop2' 08:42:42 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r0}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r2 = gettid() process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) [ 1122.304749][ T3878] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1122.331653][ T3878] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' 08:42:42 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a003f00}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1122.352310][T22912] kobject: 'loop3' (0000000079482deb): kobject_uevent_env [ 1122.359490][T22912] kobject: 'loop3' (0000000079482deb): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1122.377284][T23047] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1122.409531][ T3878] kobject: 'loop1' (0000000030290878): kobject_uevent_env [ 1122.417538][T23045] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1122.434319][ T3878] kobject: 'loop1' (0000000030290878): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1122.435526][T23045] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1122.446278][ T3878] kobject: 'loop0' (00000000678e7d7a): kobject_uevent_env [ 1122.465860][ T3878] kobject: 'loop0' (00000000678e7d7a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1122.470217][T23029] kobject: 'loop4' (0000000070d902db): kobject_uevent_env [ 1122.491971][T23029] kobject: 'loop4' (0000000070d902db): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1122.572143][T22931] XFS (loop2): Invalid superblock magic number [ 1122.612476][ T3878] kobject: 'loop0' (00000000678e7d7a): kobject_uevent_env [ 1122.631141][ T3878] kobject: 'loop0' (00000000678e7d7a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1122.727594][ T3878] kobject: 'loop3' (0000000079482deb): kobject_uevent_env [ 1122.735969][ T3878] kobject: 'loop3' (0000000079482deb): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1122.778463][ T3878] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1122.786571][ T3878] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1122.788870][T23029] XFS (loop4): Invalid superblock magic number [ 1122.849109][ T3878] kobject: 'loop2' (0000000021ced7f0): kobject_uevent_env [ 1122.856977][ T3878] kobject: 'loop2' (0000000021ced7f0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1122.857026][ T7811] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1122.877405][ T7811] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' 08:42:43 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a004305}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {0x0}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:43 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x3cd}) 08:42:43 executing program 5: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r0}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r2 = gettid() process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002640)=""/95, 0x5f}], 0x8, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:43 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0xa00}) [ 1123.022332][ T7802] kobject: 'loop2' (0000000021ced7f0): kobject_uevent_env [ 1123.029855][ T7802] kobject: 'loop2' (0000000021ced7f0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1123.052994][T23389] kobject: 'loop3' (0000000079482deb): kobject_uevent_env [ 1123.060680][T23389] kobject: 'loop3' (0000000079482deb): fill_kobj_path: path = '/devices/virtual/block/loop3' 08:42:43 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a004788}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1123.087611][T23383] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1123.107345][ T3878] kobject: 'loop4' (0000000070d902db): kobject_uevent_env [ 1123.121963][T23383] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1123.135556][ T3878] kobject: 'loop4' (0000000070d902db): fill_kobj_path: path = '/devices/virtual/block/loop4' 08:42:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r1}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:43 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x6300}) [ 1123.179059][ T3878] kobject: 'loop1' (0000000030290878): kobject_uevent_env [ 1123.245322][ T3878] kobject: 'loop1' (0000000030290878): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1123.286746][T23711] kobject: 'loop2' (0000000021ced7f0): kobject_uevent_env [ 1123.305588][ T3878] kobject: 'loop0' (00000000678e7d7a): kobject_uevent_env [ 1123.330554][T23733] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1123.330570][T23711] kobject: 'loop2' (0000000021ced7f0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1123.346915][ T3878] kobject: 'loop0' (00000000678e7d7a): fill_kobj_path: path = '/devices/virtual/block/loop0' 08:42:44 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x7ffffff2}) [ 1123.398657][ T7808] kobject: 'loop4' (0000000070d902db): kobject_uevent_env [ 1123.400718][ T3878] kobject: 'loop1' (0000000030290878): kobject_uevent_env [ 1123.415447][ T7808] kobject: 'loop4' (0000000070d902db): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1123.439269][ T3878] kobject: 'loop1' (0000000030290878): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1123.450631][ T3878] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1123.461596][ T3878] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' 08:42:44 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a004888}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:44 executing program 5: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r0}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r2 = gettid() process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) [ 1123.498585][ T3878] kobject: 'loop3' (0000000079482deb): kobject_uevent_env [ 1123.506064][ T3878] kobject: 'loop3' (0000000079482deb): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1123.581972][ T7811] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1123.589165][ T7811] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1123.629068][T23711] XFS (loop2): Invalid superblock magic number [ 1123.664258][T23834] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1123.664985][ T3878] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1123.678689][T23827] kobject: 'loop4' (0000000070d902db): kobject_uevent_env [ 1123.692759][T23827] kobject: 'loop4' (0000000070d902db): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1123.716629][ T3878] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1123.742330][T23821] kobject: 'loop3' (0000000079482deb): kobject_uevent_env [ 1123.749492][T23821] kobject: 'loop3' (0000000079482deb): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1123.774857][T23840] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1123.783446][T23840] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1123.848340][ T3878] kobject: 'loop0' (00000000678e7d7a): kobject_uevent_env [ 1123.865881][ T3878] kobject: 'loop0' (00000000678e7d7a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1123.926953][ T3878] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1123.934279][ T3878] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1123.954016][T23827] XFS (loop4): Invalid superblock magic number [ 1124.001886][T24057] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1124.009167][T24057] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' 08:42:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {0x0}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:44 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x7ffffff8}) 08:42:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002640)=""/95, 0x5f}], 0x8, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) prlimit64(r8, 0xf, &(0x7f0000002bc0)={0x3, 0xffffffffffffffff}, &(0x7f0000002b00)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000028c0)={0x10}) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000003180)=""/225) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r4, r6, &(0x7f0000002c00), 0x2) ioctl$LOOP_CLR_FD(r3, 0x4c01) 08:42:44 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a006488}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:42:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r1}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) [ 1124.052010][T23711] kobject: 'loop2' (0000000021ced7f0): kobject_uevent_env [ 1124.059213][T23711] kobject: 'loop2' (0000000021ced7f0): fill_kobj_path: path = '/devices/virtual/block/loop2' 08:42:44 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x7ffffff9}) [ 1124.104237][ T3878] kobject: 'loop2' (0000000021ced7f0): kobject_uevent_env [ 1124.115918][ T3878] kobject: 'loop2' (0000000021ced7f0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1124.141070][T24066] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1124.157777][T24066] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1124.184639][ T3878] kobject: 'loop1' (0000000030290878): kobject_uevent_env [ 1124.192111][ T3878] kobject: 'loop1' (0000000030290878): fill_kobj_path: path = '/devices/virtual/block/loop1' 08:42:44 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1, 0x2}) [ 1124.203915][T24070] kobject: 'loop3' (0000000079482deb): kobject_uevent_env [ 1124.211781][T24070] kobject: 'loop3' (0000000079482deb): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1124.227516][T24192] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1124.272180][T23827] kobject: 'loop4' (0000000070d902db): kobject_uevent_env [ 1124.279784][T23827] kobject: 'loop4' (0000000070d902db): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1124.332373][T24069] kobject: 'loop2' (0000000021ced7f0): kobject_uevent_env [ 1124.340180][T24069] kobject: 'loop2' (0000000021ced7f0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1124.403345][ T3878] kobject: 'loop0' (00000000678e7d7a): kobject_uevent_env [ 1124.410512][ T3878] kobject: 'loop0' (00000000678e7d7a): fill_kobj_path: path = '/devices/virtual/block/loop0' 08:42:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r1}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:45 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a00800e}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1124.452273][T24383] usb usb3: check_ctrlrecip: process 24383 (syz-executor.1) requesting ep 01 but needs 81 [ 1124.479151][ T3878] kobject: 'loop4' (0000000070d902db): kobject_uevent_env [ 1124.495328][T24383] usb usb3: usbfs: process 24383 (syz-executor.1) did not claim interface 0 before use [ 1124.507503][ T3878] kobject: 'loop4' (0000000070d902db): fill_kobj_path: path = '/devices/virtual/block/loop4' 08:42:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r1}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r2, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = gettid() process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x914}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x152}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa76e80979678f7036a2617314a07ddf55951f268d13657fd1c4b628451195c2d518d59b631d4799d8f1dd5a10154ccd1a2d83c08d615e773371c377607550845395a485b3f4110f2ba342704dfb463f7dab2a819d7dd0b8dbc6139", 0xb6, 0xe71}], 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000003f00)=""/22) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\a\x00', 0x1, 0x5, 0xd}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0xfffffffffffffffd, 0x0, 0x4, 0x3, 0x8}, 0x4, 0x120, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x100}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002c00), 0x2) 08:42:45 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a008035}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 1124.568726][ T3878] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1124.597989][T24432] kobject: 'loop4' (0000000070d902db): kobject_uevent_env 08:42:45 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x82be) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x1, 0x3}) [ 1124.609953][T24432] kobject: 'loop4' (0000000070d902db): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1124.620921][T24495] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 1124.624100][ T3878] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1124.640390][ T3878] kobject: 'loop3' (0000000079482deb): kobject_uevent_env [ 1124.649394][ T3878] kobject: 'loop3' (0000000079482deb): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1124.654274][ T7811] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1124.671024][T24069] XFS (loop2): Invalid superblock magic number [ 1124.677639][ T7811] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1124.689032][ T3878] kobject: 'loop0' (00000000678e7d7a): kobject_uevent_env [ 1124.699432][ T3878] kobject: 'loop0' (00000000678e7d7a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1124.726377][ T3878] kobject: 'loop1' (0000000030290878): kobject_uevent_env [ 1124.759798][ T3878] kobject: 'loop1' (0000000030290878): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1124.771027][T24500] kobject: 'loop3' (0000000079482deb): kobject_uevent_env [ 1124.780658][T24610] usb usb3: check_ctrlrecip: process 24610 (syz-executor.1) requesting ep 01 but needs 81 [ 1124.782534][T24500] kobject: 'loop3' (0000000079482deb): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1124.793030][T24610] usb usb3: usbfs: process 24610 (syz-executor.1) did not claim interface 0 before use [ 1124.822355][T24594] kobject: 'loop5' (00000000e1ab8372): kobject_uevent_env [ 1124.832295][T24594] kobject: 'loop5' (00000000e1ab8372): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1124.869782][T24432] XFS (loop4): Invalid superblock magic number [ 1124.884918][ T3878] kobject: 'loop1' (0000000030290878): kobject_uevent_env [ 1124.909460][ T3878] kobject: 'loop1' (0000000030290878): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1124.938864][ T3878] kobject: 'loop0' (00000000678e7d7a): kobject_uevent_env [ 1124.949972][ T3878] kobject: 'loop0' (00000000678e7d7a): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1124.970479][ T3878] kobject: 'loop2' (0000000021ced7f0): kobject_uevent_env [ 1124.978061][ T3878] kobject: 'loop2' (0000000021ced7f0): fill_kobj_path: path = '/devices/virtual/block/loop2' 08:42:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002380)='/dev/dlm_plock\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002c80)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002c40)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x3, r2}) r3 = open(&(0x7f0000002e40)='./file0\x00', 0x80000, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002b40)={0x0, 0x1}, &(0x7f0000002b80)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) fgetxattr(r4, &(0x7f0000002900)=@known='com.apple.FinderInfo\x00', &(0x7f0000002d80)=""/171, 0xab) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000002780)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffd, 0x9, 0x8, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee\x00', 0x1}) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r8 = gettid() process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002e80)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f00000023c0)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002640)=""/95, 0x5f}], 0x8, 0x0) syz_mount_image$xfs(&(0x7f0000002a80)='xfs\x00', &(0x7f0000002ac0)='./file0\x00', 0x1, 0x1, &(0x7f0000002940)=[{&(0x7f0000002cc0)="9e7881d980f4fd7f9436e4c3de3b663957d796125212470d8b6765673c3824cec9f14b944a2ce855457c0574d985f88bba6638bc0bcf9a027983a7f8675d0baa14029bf1597d94e7fea7bf43a9bfcaca77bd611e6262243b36f10fa