0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xa000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:46:51 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x9d00, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:46:51 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0xf400000000000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1251.014882][T25677] XFS (loop1): Invalid superblock magic number 11:46:52 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0xf5ffffff00000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:46:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x6700, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:46:52 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xb000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1251.600934][T25699] XFS (loop1): Invalid superblock magic number 11:46:52 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:46:53 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0xf6ffffff00000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:46:53 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x7202, 0x0, 0x0, 0x0) 11:46:53 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xa800, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1252.106644][T25730] XFS (loop1): Invalid superblock magic number 11:46:53 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x11000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1252.251795][T25730] XFS (loop1): Invalid superblock magic number 11:46:53 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0xf803000000000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:46:53 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xb000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:46:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x6800, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1252.682954][T25760] XFS (loop1): Invalid superblock magic number 11:46:54 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xb000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1252.835138][T25760] XFS (loop1): Invalid superblock magic number 11:46:54 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x9403, 0x0, 0x0, 0x0) 11:46:54 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0xf9fdffff00000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:46:54 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xb903, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:46:54 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x13000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1253.304284][T25795] XFS (loop1): Invalid superblock magic number 11:46:54 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0xfa03000000000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:46:54 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x11000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:46:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x6900, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:46:55 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xa800, 0x0, 0x0, 0x0) 11:46:55 executing program 4: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0xf6ffffff00000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1253.983999][T25820] XFS (loop1): Invalid superblock magic number 11:46:55 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0xff00000000000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:46:55 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x14000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1254.359048][T25850] XFS (loop4): Invalid superblock magic number 11:46:55 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xc001, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1254.487510][T25860] XFS (loop1): Invalid superblock magic number 11:46:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x6a00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:46:55 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x13000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:46:55 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0xff0f000000000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:46:56 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x13000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1254.945156][T25887] XFS (loop1): Invalid superblock magic number 11:46:56 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0xfffdffff00000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:46:56 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xb903, 0x0, 0x0, 0x0) [ 1255.366515][T25903] XFS (loop1): Invalid superblock magic number 11:46:56 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x15000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1255.472764][T25903] XFS (loop1): Invalid superblock magic number 11:46:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x6b00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:46:56 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x29a}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:46:56 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0xffffff7f00000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:46:56 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xc400, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1255.885807][T25937] XFS (loop1): Invalid superblock magic number [ 1255.980829][T25937] XFS (loop1): Invalid superblock magic number 11:46:57 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0xffffffff00000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:46:57 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xc002, 0x0, 0x0, 0x0) 11:46:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x6c00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1256.381146][T25965] XFS (loop1): Invalid superblock magic number 11:46:57 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1a040000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1256.542620][T25965] XFS (loop1): Invalid superblock magic number 11:46:57 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:46:57 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x29a}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:46:58 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xcc01, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1256.981927][T25995] XFS (loop1): Invalid superblock magic number 11:46:58 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xc400, 0x0, 0x0, 0x0) [ 1257.133383][T25995] XFS (loop1): Invalid superblock magic number 11:46:58 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x15000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:46:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x6d00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:46:58 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:46:58 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x20000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1257.686755][T26033] XFS (loop1): Invalid superblock magic number [ 1257.825104][T26033] XFS (loop1): Invalid superblock magic number 11:46:59 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:46:59 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xc700, 0x0, 0x0, 0x0) 11:46:59 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xcc03, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1258.246889][T26061] XFS (loop1): Invalid superblock magic number 11:46:59 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x40000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:46:59 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x20000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:46:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x6e00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:46:59 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1258.818874][T26092] XFS (loop1): Invalid superblock magic number [ 1258.949520][T26092] XFS (loop1): Invalid superblock magic number 11:47:00 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xcc00, 0x0, 0x0, 0x0) 11:47:00 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x5, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:00 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xdc02, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1259.236919][T26116] XFS (loop1): Invalid superblock magic number 11:47:00 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x401f0000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1259.360411][T26116] XFS (loop1): Invalid superblock magic number 11:47:00 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x6f00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:00 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x20000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1259.787877][T26150] XFS (loop1): Invalid superblock magic number [ 1259.953125][T26150] XFS (loop1): Invalid superblock magic number 11:47:01 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x40000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:01 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x7, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:01 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x4d010000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:01 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xcc01, 0x0, 0x0, 0x0) 11:47:01 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xdc03, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1260.397020][T26180] XFS (loop1): Invalid superblock magic number [ 1260.531913][T26180] XFS (loop1): Invalid superblock magic number 11:47:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x7000, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:01 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x64000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:01 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1a040000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:01 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x8, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:02 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7c150000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1261.057769][T26218] XFS (loop1): Invalid superblock magic number 11:47:02 executing program 4: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1261.171014][T26218] XFS (loop1): Invalid superblock magic number 11:47:02 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x9, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:02 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xdc02, 0x0, 0x0, 0x0) [ 1261.246356][T26238] XFS (loop4): Invalid superblock magic number 11:47:02 executing program 4: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x8, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1261.499793][T26251] XFS (loop1): Invalid superblock magic number 11:47:02 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xde03, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1261.693244][T26264] XFS (loop4): Invalid superblock magic number 11:47:02 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x9a020000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:03 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x7100, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:03 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x204, 0x0, 0x0, 0x0) [ 1262.133414][T26299] XFS (loop4): Invalid superblock magic number [ 1262.151347][T26294] XFS (loop1): Invalid superblock magic number 11:47:03 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x15}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:03 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xb, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1262.292592][T26294] XFS (loop1): Invalid superblock magic number 11:47:03 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xdc03, 0x0, 0x0, 0x0) 11:47:03 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xa00f0000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:03 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xe401, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1262.592693][T26327] XFS (loop1): Invalid superblock magic number [ 1262.693920][T26327] XFS (loop1): Invalid superblock magic number 11:47:04 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xc, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x7200, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1263.170582][T26364] XFS (loop1): Invalid superblock magic number 11:47:04 executing program 4: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x4000000000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1263.326616][T26364] XFS (loop1): Invalid superblock magic number 11:47:04 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xd, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:04 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfeffffff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:04 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xde03, 0x0, 0x0, 0x0) [ 1263.627731][T26385] XFS (loop4): Invalid superblock magic number 11:47:04 executing program 4: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xc, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x7300, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1263.889220][T26403] XFS (loop1): Invalid superblock magic number [ 1263.937238][T26413] XFS (loop4): Invalid superblock magic number 11:47:05 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xea02, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:05 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x11}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:05 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xf, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:05 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x10, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:05 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffffff7f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:05 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xe401, 0x0, 0x0, 0x0) 11:47:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x7400, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:06 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x14, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:06 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xedc0, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:06 executing program 4: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x3dc, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:06 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x28, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:06 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:06 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffffff7f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:06 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xedc0, 0x0, 0x0, 0x0) 11:47:06 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2b, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x7500, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:07 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2d, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:07 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xf201, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:07 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x30, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:07 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffffff7f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:07 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xf45f2440c3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:07 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3d, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x7600, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:08 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xf201, 0x0, 0x0, 0x0) 11:47:08 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffffff7f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:08 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x44, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:08 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:08 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x47, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:08 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xf400, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:08 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:09 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x63, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x7700, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:09 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xf400, 0x0, 0x0, 0x0) 11:47:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r1, &(0x7f0000000040)='D', 0x1a000) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) r3 = accept(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000280)) r5 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000240)={0xa10000, 0x8001, 0x5, r5, 0x0, &(0x7f0000000200)={0x9909d4, 0x20, [], @string=&(0x7f0000000180)=0x1a}}) ioctl$DRM_IOCTL_GET_MAP(r6, 0xc0286404, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, 0x3f, 0x5, 0x40, &(0x7f0000ffd000/0x3000)=nil}) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r7 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[]}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000480)=ANY=[]}}, 0x0) 11:47:09 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x79, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:09 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x40000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r1, &(0x7f0000000040)='D', 0x1a000) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) r3 = accept(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000280)) r5 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000240)={0xa10000, 0x8001, 0x5, r5, 0x0, &(0x7f0000000200)={0x9909d4, 0x20, [], @string=&(0x7f0000000180)=0x1a}}) ioctl$DRM_IOCTL_GET_MAP(r6, 0xc0286404, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, 0x3f, 0x5, 0x40, &(0x7f0000ffd000/0x3000)=nil}) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r7 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[]}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000480)=ANY=[]}}, 0x0) 11:47:09 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xf803, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r1, &(0x7f0000000040)='D', 0x1a000) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) r3 = accept(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000280)) r5 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000240)={0xa10000, 0x8001, 0x5, r5, 0x0, &(0x7f0000000200)={0x9909d4, 0x20, [], @string=&(0x7f0000000180)=0x1a}}) ioctl$DRM_IOCTL_GET_MAP(r6, 0xc0286404, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, 0x3f, 0x5, 0x40, &(0x7f0000ffd000/0x3000)=nil}) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r7 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[]}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000480)=ANY=[]}}, 0x0) 11:47:10 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x300, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:10 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) r2 = accept(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000280)) r4 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000240)={0xa10000, 0x8001, 0x5, r4, 0x0, &(0x7f0000000200)={0x9909d4, 0x20, [], @string=&(0x7f0000000180)=0x1a}}) ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, 0x3f, 0x5, 0x40, &(0x7f0000ffd000/0x3000)=nil}) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r6 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[]}, 0x1, 0x0, 0x0, 0x40}, 0x0) 11:47:10 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xf803, 0x0, 0x0, 0x0) 11:47:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x7800, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:10 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) r2 = accept(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000280)) r4 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000240)={0xa10000, 0x8001, 0x5, r4, 0x0, &(0x7f0000000200)={0x9909d4, 0x20, [], @string=&(0x7f0000000180)=0x1a}}) ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, 0x3f, 0x5, 0x40, &(0x7f0000ffd000/0x3000)=nil}) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) accept(0xffffffffffffffff, 0x0, 0x0) 11:47:10 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3a2, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:10 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:10 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) r2 = accept(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000280)) r4 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000240)={0xa10000, 0x8001, 0x5, r4, 0x0, &(0x7f0000000200)={0x9909d4, 0x20, [], @string=&(0x7f0000000180)=0x1a}}) ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, 0x3f, 0x5, 0x40, &(0x7f0000ffd000/0x3000)=nil}) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 11:47:10 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) r2 = accept(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000280)) r4 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000240)={0xa10000, 0x8001, 0x5, r4, 0x0, &(0x7f0000000200)={0x9909d4, 0x20, [], @string=&(0x7f0000000180)=0x1a}}) ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, 0x3f, 0x5, 0x40, &(0x7f0000ffd000/0x3000)=nil}) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 11:47:11 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x500, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:11 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xfa03, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:11 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x200000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:11 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) r2 = accept(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000280)) r4 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000240)={0xa10000, 0x8001, 0x5, r4, 0x0, &(0x7f0000000200)={0x9909d4, 0x20, [], @string=&(0x7f0000000180)=0x1a}}) ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, 0x3f, 0x5, 0x40, &(0x7f0000ffd000/0x3000)=nil}) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 11:47:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x7900, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:11 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xfa03, 0x0, 0x0, 0x0) 11:47:11 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2000, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:11 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) accept(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) r3 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000240)={0xa10000, 0x8001, 0x5, r3, 0x0, &(0x7f0000000200)={0x9909d4, 0x20, [], @string=&(0x7f0000000180)=0x1a}}) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, 0x3f, 0x5, 0x40, &(0x7f0000ffd000/0x3000)=nil}) 11:47:11 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) accept(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) r3 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000240)={0xa10000, 0x8001, 0x5, r3, 0x0, &(0x7f0000000200)={0x9909d4, 0x20, [], @string=&(0x7f0000000180)=0x1a}}) 11:47:12 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) accept(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) r3 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000240)={0xa10000, 0x8001, 0x5, r3, 0x0, &(0x7f0000000200)={0x9909d4, 0x20, [], @string=&(0x7f0000000180)=0x1a}}) 11:47:12 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xff00, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:12 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x7a00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:12 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2200, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:12 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) accept(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) r3 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 11:47:12 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xff00, 0x0, 0x0, 0x0) 11:47:12 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) accept(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) r3 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 11:47:13 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2300, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:13 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) accept(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) accept(0xffffffffffffffff, 0x0, 0x0) 11:47:13 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:13 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) accept(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) 11:47:13 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xff0f, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:13 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) accept(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) 11:47:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x7b00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:13 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xff0f, 0x0, 0x0, 0x0) 11:47:13 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) accept(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) 11:47:13 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2400, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:13 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x500000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:14 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) accept(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) 11:47:14 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x600000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:14 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) accept(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) 11:47:14 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x40000, 0x0, 0x0, 0x0) 11:47:14 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2500, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:14 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x40000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:14 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) accept(0xffffffffffffffff, 0x0, 0x0) 11:47:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x7c00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:14 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) 11:47:15 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x700000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:15 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 11:47:15 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2600, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:15 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 11:47:15 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xe0000, 0x0, 0x0, 0x0) 11:47:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x7d00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:15 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x800000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:15 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) accept(0xffffffffffffffff, 0x0, 0x0) 11:47:15 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xe0000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:16 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:16 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:16 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2700, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:16 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:16 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x989680, 0x0, 0x0, 0x0) 11:47:16 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x7e00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:16 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xa00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:17 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2800, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:17 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:17 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x989680, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:17 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:17 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xb00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:17 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:17 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1000000, 0x0, 0x0, 0x0) 11:47:17 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2900, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x7f00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:18 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:18 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:18 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:18 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:18 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xb00020000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:18 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2a00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:18 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:18 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1000002, 0x0, 0x0, 0x0) 11:47:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x8100, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:19 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:19 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:19 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x2000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:19 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2b00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:19 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:19 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xc00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:20 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)='D', 0x1a000) 11:47:20 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2000000, 0x0, 0x0, 0x0) 11:47:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x8200, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:20 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xd00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:20 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2c00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:20 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)='D', 0x1a000) 11:47:20 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)='D', 0x1a000) 11:47:20 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x3000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:20 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:21 executing program 4: r0 = socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:21 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:21 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2d00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x8300, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:21 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2000001, 0x0, 0x0, 0x0) 11:47:21 executing program 4: r0 = socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:21 executing program 4: r0 = socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:21 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x4000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:21 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:22 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:22 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2e00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:22 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x8400, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:22 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:22 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3000000, 0x0, 0x0, 0x0) 11:47:22 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:22 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:22 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x4020000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:23 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:23 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2f00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:23 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:23 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:23 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x8500, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:23 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4000000, 0x0, 0x0, 0x0) 11:47:23 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:23 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1500000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:24 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:24 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3000, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:24 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1a04000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:24 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x5000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:24 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100), 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:24 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4020000, 0x0, 0x0, 0x0) 11:47:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x8600, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:24 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100), 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:25 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3100, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:25 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:25 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100), 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:25 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x6000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:25 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:25 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x5000000, 0x0, 0x0, 0x0) 11:47:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x8700, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:25 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:26 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:26 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3200, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:26 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:26 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x401f000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:26 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:26 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x7000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:26 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x6000000, 0x0, 0x0, 0x0) 11:47:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x8800, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:27 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3300, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:27 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:27 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:27 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x4d01000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:27 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:27 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x7000000, 0x0, 0x0, 0x0) 11:47:28 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x6400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:28 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x8000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:28 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3400, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:28 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x8900, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:28 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:28 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7c15000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:28 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:28 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x8000000, 0x0, 0x0, 0x0) 11:47:29 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:29 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3500, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:29 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:29 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x9000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x8a00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:29 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:29 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:29 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:30 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x9000000, 0x0, 0x0, 0x0) 11:47:30 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:30 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3600, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:30 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x9a02000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:30 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x8b00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:30 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xa000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:30 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:30 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:31 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xa000000, 0x0, 0x0, 0x0) 11:47:31 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:31 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3700, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:31 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xa00f000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:31 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x8c00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:31 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:31 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xc000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:32 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, 0x0, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:32 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3800, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:32 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xc000000, 0x0, 0x0, 0x0) 11:47:32 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, 0x0, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:32 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xc340245ff4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x8d00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:32 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, 0x0, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:32 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:32 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xd000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:33 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:33 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3900, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:33 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xd000000, 0x0, 0x0, 0x0) 11:47:33 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:33 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfeffffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:33 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x8e00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:33 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:34 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xe000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:34 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:34 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3a00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:34 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x10000000, 0x0, 0x0, 0x0) 11:47:34 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, 0x0}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:34 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffffff7f00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:34 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, 0x0}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x8f00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:34 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, 0x0}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:35 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:35 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x10000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:35 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3b00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:35 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:35 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1c020000, 0x0, 0x0, 0x0) 11:47:35 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:35 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x9000, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:35 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:36 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:36 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3c00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:36 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x18000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:36 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:36 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x20000000, 0x0, 0x0, 0x0) 11:47:36 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:36 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x9100, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:37 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3d00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:37 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:37 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:37 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:37 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1c020000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:37 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x20020000, 0x0, 0x0, 0x0) 11:47:37 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)='D', 0x1a000) 11:47:37 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3e00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:38 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)='D', 0x1a000) 11:47:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x9200, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:38 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)='D', 0x1a000) 11:47:38 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:38 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, 0x0, 0x0) 11:47:38 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x20100000, 0x0, 0x0, 0x0) 11:47:38 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1e000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:38 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3f00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:38 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, 0x0, 0x0) 11:47:39 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, 0x0, 0x0) 11:47:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x9300, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:39 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040), 0x0) 11:47:39 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:39 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4000, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:39 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040), 0x0) 11:47:39 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x23000000, 0x0, 0x0, 0x0) 11:47:39 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x20000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:40 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040), 0x0) 11:47:40 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040), 0x0) 11:47:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x9400, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:40 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, 0x0, 0x0) 11:47:40 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:40 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x26000000, 0x0, 0x0, 0x0) 11:47:41 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4100, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:41 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:41 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x20100000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x9500, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:41 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xa00f000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:41 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:41 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x26020000, 0x0, 0x0, 0x0) 11:47:41 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4200, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:42 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x23000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:42 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x9600, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:42 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xa00f000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:42 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4300, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:43 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x26030000, 0x0, 0x0, 0x0) 11:47:43 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x26000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:43 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x9700, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:43 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xa00f000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:44 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4400, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:44 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x28000000, 0x0, 0x0, 0x0) 11:47:44 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:44 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:44 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x26020000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x9800, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:45 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3c030000, 0x0, 0x0, 0x0) 11:47:45 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4500, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:45 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x9a02000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:45 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x9900, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:45 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x26030000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:45 executing program 4: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x8000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:46 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3f000000, 0x0, 0x0, 0x0) 11:47:46 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4600, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:46 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x9a00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:46 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x38000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:47 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x40000000, 0x0, 0x0, 0x0) 11:47:47 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:47 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4700, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:47 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:47 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x9b00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:48 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x3f000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:48 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x42534658, 0x0, 0x0, 0x0) 11:47:48 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4800, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:48 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:48 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x9c00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:49 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4900, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:49 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4a000000, 0x0, 0x0, 0x0) 11:47:49 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x40000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:49 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:49 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x11}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x9d00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:49 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4a00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:50 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x54020000, 0x0, 0x0, 0x0) 11:47:50 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x13}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:50 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x42534658, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:50 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:50 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4b00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:50 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x14}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x9e00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:51 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x58465342, 0x0, 0x0, 0x0) 11:47:51 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x15}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:51 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x48000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:51 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4c00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:51 executing program 4: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4700, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x9f00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:52 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x64}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:52 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x68010000, 0x0, 0x0, 0x0) 11:47:52 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x14d}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:52 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x4a000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:52 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4d00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:52 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xa000, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:53 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xd00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:53 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x68020000, 0x0, 0x0, 0x0) 11:47:53 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x68010000, 0x0, 0x0, 0x0) 11:47:53 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4e00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:53 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x29a}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:53 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x4c000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xa100, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:54 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:54 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x70000000, 0x0, 0x0, 0x0) 11:47:54 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x41a}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:54 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4f00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:54 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:55 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x54020000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xa200, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:55 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:47:55 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x72020000, 0x0, 0x0, 0x0) 11:47:55 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 11:47:55 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x500}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:55 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x600000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:55 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x5000, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xa300, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:56 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x58465342, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:56 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x600}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:56 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x80969800, 0x0, 0x0, 0x0) 11:47:56 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x500}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:56 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:57 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x5100, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xa400, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:57 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x600}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:57 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x8cffffff, 0x0, 0x0, 0x0) 11:47:57 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x68000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:57 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x900}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:58 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x5200, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:58 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xa500, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:58 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x94030000, 0x0, 0x0, 0x0) 11:47:58 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:58 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x68010000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:58 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x900}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:59 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x5300, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:47:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xa600, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:47:59 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:47:59 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xa8000000, 0x0, 0x0, 0x0) 11:47:59 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) accept(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) 11:47:59 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x68020000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:47:59 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:00 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x5400, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xa700, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:00 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:00 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:00 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xb9030000, 0x0, 0x0, 0x0) 11:48:00 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x6c000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:00 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x5500, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xa800, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:01 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:01 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:01 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xc0020000, 0x0, 0x0, 0x0) 11:48:01 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x5600, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:02 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x70000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xa900, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:02 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x5700, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:02 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:02 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfa0}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:02 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xc0ed0000, 0x0, 0x0, 0x0) 11:48:03 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x72020000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xaa00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:03 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x5800, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:03 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xb9030000, 0x0, 0x0, 0x0) 11:48:03 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1100}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:03 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xc4000000, 0x0, 0x0, 0x0) 11:48:04 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xab00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:04 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x74000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:04 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x5900, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:04 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1100}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:04 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xc7000000, 0x0, 0x0, 0x0) 11:48:05 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xac00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:05 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xa8000000, 0x0, 0x0, 0x0) 11:48:05 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x7a000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:05 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1500}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:05 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x5a00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:05 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xcc000000, 0x0, 0x0, 0x0) 11:48:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xad00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:06 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:06 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x157c}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:06 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x5b00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:06 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x80969800, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:06 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xcc010000, 0x0, 0x0, 0x0) 11:48:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xfd00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:07 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x5c00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:07 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:07 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1a04}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:08 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xdc020000, 0x0, 0x0, 0x0) 11:48:08 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:08 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x8cffffff, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:08 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1f40}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xff00, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:08 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1a04}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:08 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x5d00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:08 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:09 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xdc030000, 0x0, 0x0, 0x0) 11:48:09 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:09 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x94030000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x7ffffff2, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:09 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x5e00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:09 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1a04}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:10 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x401f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:10 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xde030000, 0x0, 0x0, 0x0) 11:48:10 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x9d000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x7ffffff8, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:10 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4d01}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:10 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x5f00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:10 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1a04}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:11 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xe4010000, 0x0, 0x0, 0x0) 11:48:11 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:11 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xa8000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:11 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6400}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x7ffffff9, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:11 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x6000, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:12 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4d01}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:12 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xf2010000, 0x0, 0x0, 0x0) 11:48:12 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xb9030000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:12 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7c15}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:12 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x6100, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:12 executing program 4: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x9d000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xffff88812a2542e8, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:13 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9a02}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:13 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xf4000000, 0x0, 0x0, 0x0) 11:48:13 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xc0010000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:14 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x6200, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="0a4653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:14 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:14 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa00f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1333.132616][T28825] XFS (loop3): Invalid superblock magic number 11:48:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="254653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:14 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xf6ffffff, 0x0, 0x0, 0x0) 11:48:14 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xdc020000, 0x0, 0x0, 0x0) [ 1333.625791][T28845] XFS (loop3): Invalid superblock magic number 11:48:14 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xc0ed0000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="5d4653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:15 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x6300, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:15 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000b}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1334.201666][T28872] XFS (loop3): Invalid superblock magic number 11:48:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="634653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:15 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xf8030000, 0x0, 0x0, 0x0) 11:48:15 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x400000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1334.660860][T28889] XFS (loop3): Invalid superblock magic number 11:48:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="644653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:16 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xc4000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:16 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1f40}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:16 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x6400, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1335.002820][T28908] XFS (loop3): Invalid superblock magic number 11:48:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="694653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:16 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:16 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1500}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1335.491564][T28933] XFS (loop3): Invalid superblock magic number 11:48:16 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xf9fdffff, 0x0, 0x0, 0x0) 11:48:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="6c4653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:17 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1336.041603][T28953] XFS (loop3): Invalid superblock magic number 11:48:17 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xcc010000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="6f4653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:17 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x6500, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8c62}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000ac0)=0x1, 0x4) r3 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) getsockname$ax25(r3, &(0x7f0000000580)={{0x3, @default}, [@remote, @bcast, @rose, @netrom, @bcast, @bcast, @remote, @bcast]}, &(0x7f0000000600)=0x48) fcntl$setstatus(r2, 0x4, 0x42800) read(r2, &(0x7f00000003c0)=""/98, 0x62) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) clock_gettime(0x0, &(0x7f0000000d00)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000d80)={0x82f, 0x6, 0x4, 0x1000000, 0x6, {r4, r5/1000+30000}, {0x3, 0x1, 0x90, 0x4, 0x1f, 0x6, "cb82c889"}, 0x6, 0x1, @planes=&(0x7f0000000d40)={0x856c, 0x9, @userptr=0x3, 0x2}, 0x9, 0x0, r0}) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000e80)={'nat\x00', 0x0, 0x3, 0x3c, [], 0x1, &(0x7f0000000e00)=[{}], &(0x7f0000000e40)=""/60}, &(0x7f0000000f00)=0x78) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) recvmmsg(r0, &(0x7f0000000240)=[{{&(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000480)=""/193, 0xc1}, {&(0x7f0000000800)=""/247, 0xf7}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000000140)=""/105, 0x69}], 0x4, &(0x7f00000002c0)=""/112, 0x70}, 0xd3}], 0x1, 0x40002122, &(0x7f0000000380)) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b800000000000700000000000000000001008000000000000000000000000000000000000000000000240e000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000f65be6e12b973a8ef8c2f674690b00000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000001000300000000"], 0xb8}}, 0x0) r7 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r8 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4800000008060026bd7080fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32008000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09d5539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7243363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d4308005b443178ed2f84bf33c25283dc5fc31062818fa34691eb7787019900a3fd13203c8bbae55750f694d37a1e4c4ec4c9be6c9a8270398b5688f220ef4042b2907dd7d9a63c201cdd48e0013d8a29e9d2"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r3], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000b00)=ANY=[@ANYBLOB="54004db0dc28a7b6f9f43fdd9f37aa2a19e4e22d330e94affd97c006849273942da7698100f2a1461aa0e936890be9a98386a02a2ab6d40e90441329cf90f2f9", @ANYRES16=r10, @ANYBLOB="02002cbd7000fcdbdf250500000014000600766c616e3000000000000000000000002b00070073797374656d5f753a6f626a6563745f723a7379736c6f67645f7661725f6c69625f743a73300000"], 0x54}}, 0x20000010) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00082cbd08000400ac1414aa140003000000000000000000000000000000000005000100010000002900070073795474656d5f753a6f626a6563745f723a6273647074795f6475766963655f743a733000"/94], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r10, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 1336.526412][T28979] XFS (loop3): Invalid superblock magic number 11:48:17 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xfa030000, 0x0, 0x0, 0x0) 11:48:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="704653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:18 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1337.013524][T29000] XFS (loop3): Invalid superblock magic number 11:48:18 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xf9fdffff, 0x0, 0x0, 0x0) 11:48:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="734653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:18 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xcc030000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1337.420733][T29021] XFS (loop3): Invalid superblock magic number 11:48:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="754653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:18 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x6600, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:18 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1337.813239][T29039] XFS (loop3): Invalid superblock magic number 11:48:19 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xff000000, 0x0, 0x0, 0x0) 11:48:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="784653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:19 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:19 executing program 4: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0xf9fdffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1338.407040][T29067] XFS (loop3): Invalid superblock magic number [ 1338.434887][T29073] XFS (loop4): Invalid superblock magic number 11:48:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="ec4653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:19 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xdc020000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:19 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x6}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1338.771237][T29092] XFS (loop3): Invalid superblock magic number 11:48:20 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x6700, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="580453423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:20 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xff0f0000, 0x0, 0x0, 0x0) 11:48:20 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1339.275634][T29117] XFS (loop3): Invalid superblock magic number 11:48:20 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x7, 0x0, 0x0, 0x0) 11:48:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="58465d423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1339.590631][T29134] XFS (loop4): Invalid superblock magic number 11:48:20 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xdc030000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42800) fcntl$setlease(r1, 0x400, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 1339.812350][T29145] XFS (loop3): Invalid superblock magic number 11:48:21 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:21 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x6800, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653420969ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1340.022468][T29166] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. 11:48:21 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xfffdffff, 0x0, 0x0, 0x0) 11:48:21 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa00f000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1340.340463][T29172] attempt to access beyond end of device [ 1340.347106][T29172] loop3: rw=4096, want=21, limit=2 [ 1340.410598][T29172] XFS (loop3): SB validate failed with error -5. 11:48:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653420a69ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:21 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:21 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x6900, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1340.834613][T29197] attempt to access beyond end of device [ 1340.843715][T29197] loop3: rw=4096, want=21, limit=2 [ 1340.849363][T29197] XFS (loop3): SB validate failed with error -5. 11:48:22 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xde030000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653422f69ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:22 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:22 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9a02000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:22 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xfffffdf9, 0x0, 0x0, 0x0) [ 1341.266297][T29223] attempt to access beyond end of device [ 1341.272787][T29223] loop3: rw=4096, want=21, limit=2 [ 1341.291287][T29223] XFS (loop3): SB validate failed with error -5. 11:48:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423d69ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:22 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1341.791543][T29245] attempt to access beyond end of device [ 1341.797372][T29245] loop3: rw=4096, want=21, limit=2 [ 1341.830040][T29245] XFS (loop3): SB validate failed with error -5. 11:48:23 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xe4010000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423e69ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:23 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x6a00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:23 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x7c15000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:23 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xfffffdff, 0x0, 0x0, 0x0) [ 1342.240060][T29268] attempt to access beyond end of device [ 1342.246270][T29268] loop3: rw=4096, want=21, limit=2 [ 1342.252113][T29268] XFS (loop3): SB validate failed with error -5. 11:48:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653425c69ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:23 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="58465342330aab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1342.690733][T29288] attempt to access beyond end of device [ 1342.696611][T29288] loop3: rw=4096, want=21, limit=2 [ 1342.701902][T29288] XFS (loop3): SB validate failed with error -5. 11:48:24 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0xf400000000000000, 0x0, 0x0, 0x0, 0x0) [ 1342.969781][T29302] attempt to access beyond end of device [ 1342.981816][T29302] loop3: rw=4096, want=21, limit=2 11:48:24 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xea020000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1343.070060][T29302] XFS (loop3): SB validate failed with error -5. 11:48:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423325ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1343.211484][T29316] XFS (loop4): Invalid superblock magic number 11:48:24 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x6b00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:24 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4d01000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:24 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xffffff7f, 0x0, 0x0, 0x0) [ 1343.637558][T29335] attempt to access beyond end of device [ 1343.645052][T29335] loop3: rw=4096, want=21, limit=2 11:48:24 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb000200}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1343.702276][T29335] XFS (loop3): SB validate failed with error -5. 11:48:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="58465342335cab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:25 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xf2010000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:25 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1344.271624][T29363] attempt to access beyond end of device [ 1344.284501][T29363] loop3: rw=4096, want=21, limit=2 [ 1344.333231][T29363] XFS (loop3): SB validate failed with error -5. 11:48:25 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:25 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x6c00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:25 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xffffff8c, 0x0, 0x0, 0x0) 11:48:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab02921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1344.969589][T29394] attempt to access beyond end of device [ 1344.981486][T29394] loop3: rw=4096, want=21, limit=2 [ 1345.008745][T29394] XFS (loop3): SB validate failed with error -5. 11:48:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab03921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:26 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xf4000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:26 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb000200}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1345.401668][T29407] attempt to access beyond end of device [ 1345.421973][T29407] loop3: rw=4096, want=21, limit=2 [ 1345.430633][T29407] XFS (loop3): SB validate failed with error -5. 11:48:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab04921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:26 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:26 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x6d00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:26 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xfffffff6, 0x0, 0x0, 0x0) 11:48:27 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1345.971196][T29437] attempt to access beyond end of device [ 1345.987360][T29437] loop3: rw=4096, want=21, limit=2 [ 1345.994423][T29437] XFS (loop3): SB validate failed with error -5. 11:48:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab05921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:27 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xf6ffffff, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1346.371241][T29458] attempt to access beyond end of device [ 1346.398239][T29458] loop3: rw=4096, want=21, limit=2 [ 1346.446816][T29458] XFS (loop3): SB validate failed with error -5. 11:48:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab06921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:27 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x11000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:28 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xf905b59f63, 0x0, 0x0, 0x0) 11:48:28 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x6e00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:28 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb000200}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1347.131597][T29482] attempt to access beyond end of device [ 1347.148621][T29482] loop3: rw=4096, want=21, limit=2 [ 1347.180399][T29482] XFS (loop3): SB validate failed with error -5. 11:48:28 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xf8030000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:28 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x13000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab07921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:28 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x11000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1347.738772][T29512] attempt to access beyond end of device [ 1347.744508][T29512] loop3: rw=4096, want=21, limit=2 [ 1347.776295][T29512] XFS (loop3): SB validate failed with error -5. 11:48:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab08921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:29 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xedc000000000, 0x0, 0x0, 0x0) 11:48:29 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0xdc02000000000000, 0x0, 0x0, 0x0, 0x0) [ 1347.991332][T29529] attempt to access beyond end of device [ 1348.003318][T29529] loop3: rw=4096, want=21, limit=2 11:48:29 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x6f00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1348.038079][T29529] XFS (loop3): SB validate failed with error -5. 11:48:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab0a921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1348.296574][T29545] XFS (loop4): Invalid superblock magic number [ 1348.331435][T29553] attempt to access beyond end of device [ 1348.337318][T29553] loop3: rw=4096, want=21, limit=2 11:48:29 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x14000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1348.369479][T29553] XFS (loop3): SB validate failed with error -5. 11:48:29 executing program 4: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xc, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab0b921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:29 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xf9fdffff, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1348.801990][T29572] XFS (loop4): Invalid superblock magic number [ 1348.809215][T29578] attempt to access beyond end of device [ 1348.816130][T29578] loop3: rw=4096, want=21, limit=2 [ 1348.822144][T29578] XFS (loop3): SB validate failed with error -5. 11:48:30 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab0c921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:30 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4000000000000, 0x0, 0x0, 0x0) 11:48:30 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x7000, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1349.305078][T29608] attempt to access beyond end of device [ 1349.312024][T29608] loop3: rw=4096, want=21, limit=2 [ 1349.325394][T29608] XFS (loop3): SB validate failed with error -5. 11:48:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab0d921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:30 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x15000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1349.676176][T29628] attempt to access beyond end of device [ 1349.690294][T29628] loop3: rw=4096, want=21, limit=2 11:48:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x4800, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x48, 0x0, {0x0, 0x0, 0x3f00}, [@IFLA_OPERSTATE={0x8, 0xa, 0x10}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0xf0}, 0x0) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_genetlink_get_family_id$team(&(0x7f00000010c0)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003480)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000003580)=0xe8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="00000000ee42706d9a00000000280012000c00010076657468000200140001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b89aab49ad30a704aa4f574f493a554bd08b3abf111160c5ee6746a0e9a03b182760e556f17156f9573e220fca1bb372eea61fbb4a67b003702e307c1651bbcb8c09d5de2a33ac580443bdc788b1f00f9a3155816be58d23eb1733453372067f9ab361101b5271c4c24642ba2bf25dd22514b92ed55e28140c751b8d4d2a22b00"], 0x74}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x10, r8, 0x0) r9 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r10 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r11 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000000, 'lblcr\x00'}, 0x2c) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000300)={r12, @loopback, @remote}, 0xc) r13 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r13, 0x0, 0x8, &(0x7f0000001600)={0x0, @remote, @empty}, &(0x7f0000000100)=0xfffffe78) ioctl$sock_inet_SIOCGIFPFLAGS(r11, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f0000000140)={r14, @remote, @loopback}, 0xc) ioctl$FICLONE(r8, 0x40049409, r10) r15 = syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000480)={'team0\x00', r14}) sendmsg$TEAM_CMD_PORT_LIST_GET(r10, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x404001}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x19b, r15, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r12}, {0xbc}}, {{0x8, 0x1, r12}, {0x44}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000037c0)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f00000038c0)=0xe8) r17 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r17, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r17, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000003900)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000003a00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003cc0)={'team0\x00', 0x0}) r20 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r20, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r20, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(r20, 0x8933, &(0x7f0000003d00)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000003d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003d80)=0x14) r23 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x10, r23, 0x0) r24 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r24, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r25 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r25, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000000, 'lblcr\x00'}, 0x2c) r26 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r26, 0x0, 0x8, &(0x7f0000001600)={0x0, @remote, @empty}, &(0x7f0000000100)=0xfffffe78) ioctl$sock_inet_SIOCGIFPFLAGS(r25, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r25, 0x0, 0x8, &(0x7f0000000140)={r27, @remote, @loopback}, 0xc) ioctl$FICLONE(r23, 0x40049409, r24) ioctl$ifreq_SIOCGIFINDEX_team(r24, 0x8933, &(0x7f0000000480)={'team0\x00', r27}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003dc0)={'team0\x00', 0x0}) r29 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x10, r29, 0x0) r30 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r31 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r31, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r32 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r32, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000000, 'lblcr\x00'}, 0x2c) getsockopt$inet_pktinfo(r30, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(r30, 0x0, 0x8, &(0x7f0000000300)={r33, @loopback, @remote}, 0xc) r34 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r34, 0x0, 0x8, &(0x7f0000001600)={0x0, @remote, @empty}, &(0x7f0000000100)=0xfffffe78) ioctl$sock_inet_SIOCGIFPFLAGS(r32, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r32, 0x0, 0x8, &(0x7f0000000140)={r35, @remote, @loopback}, 0xc) ioctl$FICLONE(r29, 0x40049409, r31) r36 = syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r31, 0x8933, &(0x7f0000000480)={'team0\x00', r35}) sendmsg$TEAM_CMD_PORT_LIST_GET(r31, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x404001}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x19b, r36, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r33}, {0xbc}}, {{0x8, 0x1, r33}, {0x44}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000007a80)={@local, 0x0}, &(0x7f0000007ac0)=0x14) r38 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x10, r38, 0x0) r39 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r40 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r40, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r41 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r41, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000000, 'lblcr\x00'}, 0x2c) getsockopt$inet_pktinfo(r39, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(r39, 0x0, 0x8, &(0x7f0000000300)={r42, @loopback, @remote}, 0xc) r43 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r43, 0x0, 0x8, &(0x7f0000001600)={0x0, @remote, @empty}, &(0x7f0000000100)=0xfffffe78) ioctl$sock_inet_SIOCGIFPFLAGS(r41, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r41, 0x0, 0x8, &(0x7f0000000140)={r44, @remote, @loopback}, 0xc) ioctl$FICLONE(r38, 0x40049409, r40) r45 = syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r40, 0x8933, &(0x7f0000000480)={'team0\x00', r44}) sendmsg$TEAM_CMD_PORT_LIST_GET(r40, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x404001}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x19b, r45, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r42}, {0xbc}}, {{0x8, 0x1, r42}, {0x44}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r46 = socket$nl_route(0x10, 0x3, 0x0) r47 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r47, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r47, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r48, @ANYBLOB="00000000ee42706d9a00000000280012000c00010076657468000200140001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r46, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r48, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b89aab49ad30a704aa4f574f493a554bd08b3abf111160c5ee6746a0e9a03b182760e556f17156f9573e220fca1bb372eea61fbb4a67b003702e307c1651bbcb8c09d5de2a33ac580443bdc788b1f00f9a3155816be58d23eb1733453372067f9ab361101b5271c4c24642ba2bf25dd22514b92ed55e28140c751b8d4d2a22b00"], 0x74}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000007d00)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000007e00)=0xe8) r50 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r50, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r50, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(r50, 0x29, 0x23, &(0x7f0000009380)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000009480)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000094c0)={@ipv4={[], [], @dev}, 0x0}, &(0x7f0000009500)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000011e40)={@dev, 0x0}, &(0x7f0000011e80)=0x14) r54 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x10, r54, 0x0) r55 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r56 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r56, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r57 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r57, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000000, 'lblcr\x00'}, 0x2c) getsockopt$inet_pktinfo(r55, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(r55, 0x0, 0x8, &(0x7f0000000300)={r58, @loopback, @remote}, 0xc) r59 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r59, 0x0, 0x8, &(0x7f0000001600)={0x0, @remote, @empty}, &(0x7f0000000100)=0xfffffe78) ioctl$sock_inet_SIOCGIFPFLAGS(r57, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r57, 0x0, 0x8, &(0x7f0000000140)={r60, @remote, @loopback}, 0xc) ioctl$FICLONE(r54, 0x40049409, r56) r61 = syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r56, 0x8933, &(0x7f0000000480)={'team0\x00', r60}) sendmsg$TEAM_CMD_PORT_LIST_GET(r56, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x404001}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x19b, r61, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r58}, {0xbc}}, {{0x8, 0x1, r58}, {0x44}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r62 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x10, r62, 0x0) r63 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r63, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r64 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r64, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000000, 'lblcr\x00'}, 0x2c) r65 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r65, 0x0, 0x8, &(0x7f0000001600)={0x0, @remote, @empty}, &(0x7f0000000100)=0xfffffe78) ioctl$sock_inet_SIOCGIFPFLAGS(r64, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r64, 0x0, 0x8, &(0x7f0000000140)={r66, @remote, @loopback}, 0xc) ioctl$FICLONE(r62, 0x40049409, r63) ioctl$ifreq_SIOCGIFINDEX_team(r63, 0x8933, &(0x7f0000000480)={'team0\x00', r66}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000012580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000012540)={&(0x7f0000011ec0)={0x67c, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r18}}}]}}, {{0x8, 0x1, r19}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r21}}}]}}, {{0x8, 0x1, r22}, {0x254, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r27}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r28}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r33}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r37}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r42}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r48}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r49}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r51}}}]}}, {{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r52}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4b}}, {0x8, 0x6, r53}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r58}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r66}}}]}}]}, 0x67c}, 0x1, 0x0, 0x0, 0x20000004}, 0x48000) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f00000000c0)=""/4091, &(0x7f0000000000)=0xffb) [ 1349.730289][T29628] XFS (loop3): SB validate failed with error -5. [ 1349.798552][T29642] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1349.812148][T29642] team0: Device ipvlan1 failed to register rx_handler 11:48:31 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xfa030000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab0e921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:31 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1a040000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:31 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xe000000000000, 0x0, 0x0, 0x0) [ 1350.238088][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1350.244395][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1350.262673][T29658] attempt to access beyond end of device [ 1350.287827][T29658] loop3: rw=4096, want=21, limit=2 [ 1350.316263][T29658] XFS (loop3): SB validate failed with error -5. 11:48:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab0f921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:31 executing program 4: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x8, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:31 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x7100, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1350.795797][T29684] XFS (loop4): Invalid superblock magic number [ 1350.824193][T29687] attempt to access beyond end of device [ 1350.831281][T29687] loop3: rw=4096, want=21, limit=2 [ 1350.838463][T29687] XFS (loop3): SB validate failed with error -5. 11:48:32 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:32 executing program 4: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x6, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab10921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:32 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xfbffffff, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:32 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x100000000000000, 0x0, 0x0, 0x0) [ 1351.384306][T29719] attempt to access beyond end of device [ 1351.390667][T29716] XFS (loop4): Invalid superblock magic number [ 1351.426205][T29719] loop3: rw=4096, want=21, limit=2 [ 1351.448182][T29719] XFS (loop3): SB validate failed with error -5. 11:48:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab11921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:32 executing program 4: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x70000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:32 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x40000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:32 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x7200, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1351.957171][T29746] attempt to access beyond end of device [ 1351.985146][T29746] loop3: rw=4096, want=21, limit=2 [ 1352.044540][T29746] XFS (loop3): SB validate failed with error -5. [ 1352.062860][T29756] XFS (loop4): Invalid superblock magic number 11:48:33 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xff000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xb, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab12921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:33 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x100000200000000, 0x0, 0x0, 0x0) [ 1352.554660][T29779] XFS (loop4): bad version [ 1352.559289][T29779] XFS (loop4): SB validate failed with error -22. 11:48:33 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x401f0000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:33 executing program 4: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x3, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:34 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4d010000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1352.828258][T29795] attempt to access beyond end of device [ 1352.833957][T29795] loop3: rw=4096, want=21, limit=2 [ 1352.898126][T29795] XFS (loop3): SB validate failed with error -5. 11:48:34 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x7300, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab13921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1353.097766][T29810] XFS (loop4): Invalid superblock magic number [ 1353.282377][T29830] attempt to access beyond end of device [ 1353.288405][T29830] loop3: rw=4096, want=21, limit=2 [ 1353.299076][T29830] XFS (loop3): SB validate failed with error -5. 11:48:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x62, 0xbe, "05bce2b0c9cf8c24f5335e874320ef172c5cc3e875213e1d124031055aaf01b893b58ab6da3f0b6713e3f6f73588197b26933ec2e100abfc7c2a4bd8fdb90edc1159e4119f50a5ec5c7d64f04f48fc83c030a75c01dcc647d6403ac22ee6"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 11:48:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab14921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:34 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xff0f0000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1353.504747][T29845] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. 11:48:34 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x200000000000000, 0x0, 0x0, 0x0) 11:48:34 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x7000000000000000, 0x0, 0x0, 0x0, 0x0) 11:48:34 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x64000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1353.696146][T29851] attempt to access beyond end of device [ 1353.703264][T29851] loop3: rw=4096, want=21, limit=2 [ 1353.746176][T29851] XFS (loop3): SB validate failed with error -5. [ 1353.836429][T29865] XFS (loop4): Invalid superblock magic number 11:48:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab15921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab14921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:35 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x7400, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:35 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7c150000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1354.413781][T29888] attempt to access beyond end of device [ 1354.442265][T29888] loop3: rw=4096, want=21, limit=2 [ 1354.461717][T29892] attempt to access beyond end of device [ 1354.502322][T29892] loop4: rw=4096, want=21, limit=2 11:48:35 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x300000000000000, 0x0, 0x0, 0x0) [ 1354.527223][T29888] XFS (loop3): SB validate failed with error -5. [ 1354.553338][T29892] XFS (loop4): SB validate failed with error -5. 11:48:35 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xb00020000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:35 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xfffdffff, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab16921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1354.980863][T29926] attempt to access beyond end of device [ 1354.995855][T29926] loop3: rw=4096, want=21, limit=2 [ 1355.012294][T29926] XFS (loop3): SB validate failed with error -5. 11:48:36 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x700000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab17921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:36 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9a020000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:36 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x7500, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1355.446046][T29946] attempt to access beyond end of device [ 1355.472209][T29946] loop3: rw=4096, want=21, limit=2 [ 1355.489011][T29946] XFS (loop3): SB validate failed with error -5. 11:48:36 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x400000000000000, 0x0, 0x0, 0x0) 11:48:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab18921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:37 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xfffffdf9, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:37 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x600000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1355.891284][T29967] attempt to access beyond end of device [ 1355.900610][T29967] loop3: rw=4096, want=21, limit=2 [ 1355.922143][T29967] XFS (loop3): SB validate failed with error -5. 11:48:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab19921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:37 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa00f0000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:37 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x500000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1356.369973][T29987] attempt to access beyond end of device [ 1356.375798][T29987] loop3: rw=4096, want=21, limit=2 [ 1356.390003][T29987] XFS (loop3): SB validate failed with error -5. 11:48:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab1a921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:37 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x7600, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:37 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x402000000000000, 0x0, 0x0, 0x0) 11:48:38 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xfffffdff, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1356.796871][T30010] attempt to access beyond end of device [ 1356.804373][T30010] loop3: rw=4096, want=21, limit=2 [ 1356.818514][T30010] XFS (loop3): SB validate failed with error -5. 11:48:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab1b921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:38 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x2800000000000000, 0x0, 0x0, 0x0, 0x0) [ 1357.205366][T30030] attempt to access beyond end of device [ 1357.221336][T30030] loop3: rw=4096, want=21, limit=2 [ 1357.226756][T30030] XFS (loop3): SB validate failed with error -5. 11:48:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab1c921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1357.488007][T30040] XFS (loop4): Invalid superblock magic number 11:48:38 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfeffffff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1357.656587][T30054] attempt to access beyond end of device [ 1357.663487][T30054] loop3: rw=4096, want=21, limit=2 [ 1357.668725][T30054] XFS (loop3): SB validate failed with error -5. 11:48:38 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x7700, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:38 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x500000000000000, 0x0, 0x0, 0x0) 11:48:38 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab1d921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:39 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xffffff7f, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:39 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffff7f}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1358.147896][T30084] attempt to access beyond end of device [ 1358.172267][T30084] loop3: rw=4096, want=21, limit=2 [ 1358.223184][T30084] XFS (loop3): SB validate failed with error -5. 11:48:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab1e921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:39 executing program 4: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xfffffdff, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1358.689209][T30105] attempt to access beyond end of device [ 1358.695156][T30105] loop3: rw=4096, want=21, limit=2 11:48:39 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x600000000000000, 0x0, 0x0, 0x0) [ 1358.730069][T30105] XFS (loop3): SB validate failed with error -5. 11:48:40 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab21921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:40 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x7800, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:40 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xffffff8c, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1359.286881][T30131] attempt to access beyond end of device [ 1359.293263][T30131] loop3: rw=4096, want=21, limit=2 [ 1359.312763][T30131] XFS (loop3): SB validate failed with error -5. 11:48:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab22921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:40 executing program 4 (fault-call:5 fault-nth:0): r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:48:40 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xf45f2440c3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:40 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x700000000000000, 0x0, 0x0, 0x0) [ 1359.815682][T30151] attempt to access beyond end of device [ 1359.845136][T30151] loop3: rw=4096, want=21, limit=2 [ 1359.867782][T30163] FAULT_INJECTION: forcing a failure. [ 1359.867782][T30163] name failslab, interval 1, probability 0, space 0, times 0 [ 1359.900790][T30151] XFS (loop3): SB validate failed with error -5. [ 1359.957723][T30163] CPU: 0 PID: 30163 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 1359.966440][T30163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1359.976503][T30163] Call Trace: [ 1359.979818][T30163] dump_stack+0x11d/0x181 [ 1359.984236][T30163] should_fail.cold+0xa/0x1a [ 1359.988851][T30163] __should_failslab+0xee/0x130 [ 1359.993728][T30163] should_failslab+0x9/0x14 [ 1359.998244][T30163] kmem_cache_alloc_trace+0x2a/0x5d0 [ 1360.003578][T30163] ? ima_get_action+0x6e/0x80 [ 1360.008408][T30163] sctp_stream_init_ext+0x42/0x130 [ 1360.013539][T30163] sctp_sendmsg_to_asoc+0x123e/0x1420 [ 1360.018948][T30163] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1360.025207][T30163] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1360.031561][T30163] ? sctp_sendmsg_check_sflags+0x140/0x1d0 [ 1360.037412][T30163] ? sctp_sendmsg_update_sinfo+0x9c/0x220 [ 1360.043251][T30163] sctp_sendmsg+0xbeb/0x14f0 [ 1360.047864][T30163] ? aa_sock_msg_perm.isra.0+0xa5/0x140 [ 1360.053438][T30163] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1360.059733][T30163] ? inet_send_prepare+0xa3/0x200 [ 1360.064835][T30163] inet_sendmsg+0x6d/0x90 [ 1360.069200][T30163] ? inet_send_prepare+0x200/0x200 [ 1360.074373][T30163] sock_sendmsg+0x9f/0xc0 [ 1360.078765][T30163] sock_write_iter+0x16b/0x210 [ 1360.083744][T30163] new_sync_write+0x388/0x4a0 [ 1360.088594][T30163] __vfs_write+0xb1/0xc0 [ 1360.092851][T30163] vfs_write+0x18a/0x390 [ 1360.097114][T30163] ksys_write+0x17b/0x1b0 [ 1360.101508][T30163] __x64_sys_write+0x4c/0x60 [ 1360.106118][T30163] do_syscall_64+0xcc/0x3a0 [ 1360.110742][T30163] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1360.116636][T30163] RIP: 0033:0x45b349 [ 1360.120619][T30163] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1360.140512][T30163] RSP: 002b:00007f44d6964c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1360.149042][T30163] RAX: ffffffffffffffda RBX: 00007f44d69656d4 RCX: 000000000045b349 11:48:41 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x7900, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1360.157015][T30163] RDX: 000000000001a000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1360.165085][T30163] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1360.173243][T30163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1360.181230][T30163] R13: 0000000000000c09 R14: 00000000004c8b2b R15: 0000000000000000 11:48:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab23921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:41 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:41 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xfffffff6, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1360.528795][T30179] attempt to access beyond end of device [ 1360.534594][T30179] loop3: rw=4096, want=21, limit=2 [ 1360.575011][T30179] XFS (loop3): SB validate failed with error -5. 11:48:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab24921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:41 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x800000000000000, 0x0, 0x0, 0x0) 11:48:42 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) [ 1360.888533][T30200] attempt to access beyond end of device [ 1360.912302][T30200] loop3: rw=4096, want=21, limit=2 [ 1360.961359][T30200] XFS (loop3): SB validate failed with error -5. 11:48:42 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0xa034) 11:48:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab25921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:42 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0xffcc) 11:48:42 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x7a00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1361.463741][T30222] attempt to access beyond end of device [ 1361.473745][T30222] loop3: rw=4096, want=21, limit=2 [ 1361.479343][T30222] XFS (loop3): SB validate failed with error -5. 11:48:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab26921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:42 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x40000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:42 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xfffffffb, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:42 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a002) 11:48:42 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x900000000000000, 0x0, 0x0, 0x0) [ 1361.817134][T30247] attempt to access beyond end of device [ 1361.823186][T30247] loop3: rw=4096, want=21, limit=2 [ 1361.835123][T30247] XFS (loop3): SB validate failed with error -5. 11:48:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab27921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:43 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a003) [ 1362.212886][T30269] attempt to access beyond end of device [ 1362.221033][T30269] loop3: rw=4096, want=21, limit=2 [ 1362.229627][T30269] XFS (loop3): SB validate failed with error -5. 11:48:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab3d921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:43 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x7b00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:43 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a004) 11:48:43 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:43 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xa00000000000000, 0x0, 0x0, 0x0) [ 1362.677144][T30292] attempt to access beyond end of device [ 1362.694649][T30292] loop3: rw=4096, want=21, limit=2 [ 1362.817702][T30292] XFS (loop3): SB validate failed with error -5. 11:48:44 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x112930bfb41, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:44 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a005) 11:48:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab3e921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:44 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x200000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:44 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x7c00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1363.418538][T30328] attempt to access beyond end of device [ 1363.427009][T30328] loop3: rw=4096, want=21, limit=2 [ 1363.485354][T30328] XFS (loop3): SB validate failed with error -5. 11:48:44 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a006) 11:48:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921483bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:44 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a007) 11:48:45 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xc00000000000000, 0x0, 0x0, 0x0) [ 1364.016365][T30356] attempt to access beyond end of device [ 1364.036567][T30356] loop3: rw=4096, want=21, limit=2 11:48:45 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x11293b4abaa, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:45 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a008) [ 1364.086477][T30356] XFS (loop3): SB validate failed with error -5. 11:48:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09923d83bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:45 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a009) 11:48:45 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:45 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x7d00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1364.645661][T30386] attempt to access beyond end of device [ 1364.653894][T30386] loop3: rw=4096, want=21, limit=2 [ 1364.673355][T30386] XFS (loop3): SB validate failed with error -5. 11:48:45 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a00a) 11:48:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09923e83bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:46 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xd00000000000000, 0x0, 0x0, 0x0) 11:48:46 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a00c) 11:48:46 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a00e) [ 1365.246359][T30416] attempt to access beyond end of device [ 1365.283746][T30416] loop3: rw=4096, want=21, limit=2 11:48:46 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x11294520724, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1365.292116][T30416] XFS (loop3): SB validate failed with error -5. 11:48:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09925d83bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:46 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x7e00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:46 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:46 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a00f) [ 1365.836995][T30451] attempt to access beyond end of device [ 1365.842902][T30451] loop3: rw=4096, want=21, limit=2 [ 1365.856192][T30451] XFS (loop3): SB validate failed with error -5. 11:48:47 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a010) 11:48:47 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1000000000000000, 0x0, 0x0, 0x0) 11:48:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd250189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:47 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x500000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:47 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a014) 11:48:47 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a018) [ 1366.331117][T30478] attempt to access beyond end of device [ 1366.394739][T30478] loop3: rw=4096, want=21, limit=2 [ 1366.426641][T30478] XFS (loop3): SB validate failed with error -5. 11:48:47 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xedc000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:47 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a02c) 11:48:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd5c0189028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:47 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x7f00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:47 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a030) [ 1366.897407][T30510] attempt to access beyond end of device [ 1366.903885][T30510] loop3: rw=4096, want=21, limit=2 [ 1366.917801][T30510] XFS (loop3): SB validate failed with error -5. 11:48:48 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x600000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0289028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:48 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1c02000000000000, 0x0, 0x0, 0x0) 11:48:48 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a03c) [ 1367.360456][T30536] attempt to access beyond end of device [ 1367.371959][T30536] loop3: rw=4096, want=21, limit=2 [ 1367.414218][T30536] XFS (loop3): SB validate failed with error -5. 11:48:48 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1fff8) 11:48:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0389028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:48 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x4000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:48 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x34000) 11:48:49 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x700000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:49 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x8100, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1367.926163][T30564] attempt to access beyond end of device [ 1367.932386][T30564] loop3: rw=4096, want=21, limit=2 [ 1367.967752][T30564] XFS (loop3): SB validate failed with error -5. 11:48:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0489028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:49 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x2001a040) 11:48:49 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2000000000000000, 0x0, 0x0, 0x0) 11:48:49 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x800000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1368.403055][T30590] attempt to access beyond end of device [ 1368.410229][T30590] loop3: rw=4096, want=21, limit=2 [ 1368.457891][T30590] XFS (loop3): SB validate failed with error -5. 11:48:49 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0xfffffdef) 11:48:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0589028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:50 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0xffffffe0) 11:48:50 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x7ffffffffffff, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1368.971798][T30620] attempt to access beyond end of device [ 1368.979173][T30620] loop3: rw=4096, want=21, limit=2 [ 1369.020314][T30620] XFS (loop3): SB validate failed with error -5. 11:48:50 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x8200, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:50 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0xfffffffffffffdef) 11:48:50 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2002000000000000, 0x0, 0x0, 0x0) 11:48:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0689028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:50 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x420280, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000240)=""/93) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000140)=0x20, 0x4) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:48:50 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1369.601387][T30653] attempt to access beyond end of device [ 1369.641573][T30653] loop3: rw=4096, want=21, limit=2 11:48:50 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendto$l2tp(r1, &(0x7f0000000200)="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", 0x1000, 0x4, &(0x7f0000000140)={0x2, 0x0, @local, 0x4}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) [ 1369.687834][T30653] XFS (loop3): SB validate failed with error -5. 11:48:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0789028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:51 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000240)=0x8) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed0f9783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b80010000000000000e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199b2158cb5bec3bb4a4fcb0197550fdf2cd023f223b279fe67bf1db5df603dfb90d73ee1717aa57ce3f64bd1337fdbb7f11b560200400b91995e646d812d9a415a1d4a5ecc9c223cce8789fc959d3550b32cc10937295f7bb9df55eac57e757f723fe04ee0f9772c9db34baa031d"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000140)=0xfff, 0x2) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1, 0x0, 0xffffffffffffff8d}, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000280)) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000200)) write(r1, &(0x7f0000000040)='D', 0x1a000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42800) signalfd(r4, &(0x7f0000000180)={[0x10001]}, 0x8) [ 1370.061853][T30677] attempt to access beyond end of device [ 1370.069212][T30677] loop3: rw=4096, want=21, limit=2 11:48:51 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xe000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1370.115421][T30677] XFS (loop3): SB validate failed with error -5. 11:48:51 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0xfffffffffffffe1f, &(0x7f0000000000), 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:48:51 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2010000000000000, 0x0, 0x0, 0x0) 11:48:51 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x8300, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0889028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:51 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea18254ffffffffffffffff8b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) bind$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:48:51 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:51 executing program 4: r0 = socket$inet(0x2, 0x4, 0xa4) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x5, 0x206842) getpeername$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000200)=0x1c) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)='*', 0x1}], 0x1}, 0x4800) write(r0, &(0x7f0000000040)='D', 0x1a000) [ 1370.650932][T30713] attempt to access beyond end of device [ 1370.656736][T30713] loop3: rw=4096, want=21, limit=2 [ 1370.744431][T30713] XFS (loop3): SB validate failed with error -5. 11:48:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0989028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:52 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:52 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) accept(r2, 0x0, &(0x7f0000000200)) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000140)={0x8, 0x39314142, 0x2, @discrete={0x1, 0xdce4}}) write(r0, &(0x7f0000000040)='D', 0x1a000) [ 1371.163650][T30737] attempt to access beyond end of device [ 1371.171626][T30737] loop3: rw=4096, want=21, limit=2 [ 1371.191122][T30737] XFS (loop3): SB validate failed with error -5. 11:48:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0a89028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:52 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x100000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:52 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2300000000000000, 0x0, 0x0, 0x0) 11:48:52 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0x7, 0x2, 0x1000, 0x40}, 0x8) sendto$inet(r1, &(0x7f0000000580)="74d98b5697db8339123529a40e92077ff8949c8f178b4d4865a5fe7be13da9924bf1202b155ca47034e06d473b39efb1f772f69a789d74f6c7f890e3582fda760c024ae9864d212c429cf5ef6222f797327e9a18de5a5aae4d917bd400b72b47812c3e40c438d99e3dbe32b1bb73ee85d6257076b73a291a1f0df9be9b558e7b2620945a6759d78dc9dc235f4f75d0beb729a659b006c25ea4d613816c6714a0d45c5095b8aaad4ebb9539f53297527046aa35da805e8defa6903beed68507bd4050bc04d9e1c4cca12d20900ce03b7e94fed62ddfa22d5172", 0xd9, 0x64008044, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000200)) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000000c0)) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a055) 11:48:52 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x8400, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1371.534658][T30759] attempt to access beyond end of device [ 1371.578462][T30759] loop3: rw=4096, want=21, limit=2 [ 1371.583891][T30759] XFS (loop3): SB validate failed with error -5. 11:48:52 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb00020000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:53 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000140)=0x100000) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:48:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0b89028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:53 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x5) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:48:53 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1372.206872][T30792] attempt to access beyond end of device [ 1372.259378][T30792] loop3: rw=4096, want=21, limit=2 11:48:53 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2600000000000000, 0x0, 0x0, 0x0) [ 1372.320118][T30792] XFS (loop3): SB validate failed with error -5. 11:48:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0c89028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:53 executing program 4: r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000200)) r2 = open(&(0x7f0000000140)='./file0\x00', 0x1a9400, 0x132) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000180)={r2, 0x1, 0xfffff000, 0x1000}) 11:48:53 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x200000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:53 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:53 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000400)) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1affb1533d2778e4e7b4b9a1f4fe916bda47418ce4e948c635e6d4ce7363daf37f809af12735b854ed126687d0dd51e9ea171099aea18254b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b4431fc67eed6ebe878ed2f84bf33c2520000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x19f}}, 0x401, 0x105}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e24, 0x3f, @remote, 0x6}}, [0x6, 0xb16b, 0x8, 0xfffffffffffffe00, 0x80000001, 0x2, 0x0, 0x6, 0x400, 0x0, 0x81, 0x8, 0xcfe, 0x3f, 0xcc2]}, &(0x7f0000000180)=0x100) write$rfkill(0xffffffffffffffff, &(0x7f00000003c0)={0x800, 0x6, 0x1, 0x1, 0x1}, 0x8) [ 1372.780906][T30827] attempt to access beyond end of device [ 1372.786696][T30827] loop3: rw=4096, want=21, limit=2 [ 1372.815330][T30827] XFS (loop3): SB validate failed with error -5. 11:48:54 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x8500, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:54 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x242, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x3, {0x4, 0x9, "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", 0x20, 0x80, 0x8, 0xf7, 0x7, 0x4, 0x40, 0x1}, r2}}, 0x128) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:48:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0d89028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:54 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:54 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2602000000000000, 0x0, 0x0, 0x0) [ 1373.302299][T30858] attempt to access beyond end of device [ 1373.318721][T30858] loop3: rw=4096, want=21, limit=2 [ 1373.348667][T30858] XFS (loop3): SB validate failed with error -5. 11:48:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0f89028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:54 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x3}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r1}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r1, 0x9, 0x10}, 0xc) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r2, &(0x7f0000000040)='D', 0x1a000) 11:48:54 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x300000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1373.776541][T30879] attempt to access beyond end of device [ 1373.783973][T30879] loop3: rw=4096, want=21, limit=2 [ 1373.803180][T30879] XFS (loop3): SB validate failed with error -5. 11:48:55 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:55 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:48:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b1089028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:55 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x8600, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:55 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x1, 0x2, 0x1, {0xa, 0x4e23, 0x2, @remote, 0xfffffff9}}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x100000000000026a}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:48:55 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2603000000000000, 0x0, 0x0, 0x0) [ 1374.288814][T30911] attempt to access beyond end of device [ 1374.294927][T30911] loop3: rw=4096, want=21, limit=2 [ 1374.312628][T30911] XFS (loop3): SB validate failed with error -5. 11:48:55 executing program 4: setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x800001, 0x0) sendto$inet(r0, &(0x7f0000000280)="1ff8c332ce551a3af97f5d54bd180f9a98edcc6b505344faf62d338bc682370b1ea9afd83e361c251b037825135b109aa2a28d", 0x33, 0x100a0, &(0x7f00000002c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write(0xffffffffffffffff, &(0x7f0000000040)='D', 0x1a000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x18d00, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000300)) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000200)={0x1, [0x6a, 0x200, 0x20, 0x5, 0x3, 0x7, 0x4, 0xff, 0x2, 0x1, 0x5cf, 0x0, 0x401, 0xfc01, 0x7, 0x7, 0x2, 0x7ff, 0xe2, 0x1, 0x20, 0x40, 0x290, 0x0, 0x4, 0x518, 0x40, 0x6, 0x9, 0x40, 0xff80, 0xe388, 0xc2f9, 0x100, 0x0, 0x8, 0x0, 0x7, 0x0, 0x5, 0x3, 0x5, 0xa600, 0x5, 0x44, 0x4, 0x401, 0x14], 0x9}) 11:48:55 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b1489028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:55 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={0x0, 0xee}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x0, r1}, 0x10) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20\x00', 0x501100, 0x0) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) syz_open_dev$char_usb(0xc, 0xb4, 0x681777e8) r3 = socket$isdn_base(0x22, 0x3, 0x0) read(r3, &(0x7f0000000200)=""/223, 0xdf) r4 = accept(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_evm(r3, &(0x7f0000000380)='security.evm\x00', &(0x7f00000003c0)=@sha1={0x1, "f844366ef36f4b6a784805c5227810291420c538"}, 0x15, 0x1) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000340)) 11:48:55 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x400000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1374.860580][T30940] attempt to access beyond end of device [ 1374.867871][T30940] loop3: rw=4096, want=21, limit=2 [ 1374.878928][T30940] XFS (loop3): SB validate failed with error -5. 11:48:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b2589028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:56 executing program 4: prctl$PR_GET_TIMERSLACK(0x1e) r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x2c) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000200)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) 11:48:56 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x8700, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:56 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2800000000000000, 0x0, 0x0, 0x0) [ 1375.323182][T30964] attempt to access beyond end of device [ 1375.333144][T30964] loop3: rw=4096, want=21, limit=2 [ 1375.417822][T30964] XFS (loop3): SB validate failed with error -5. 11:48:56 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e00, @dev={0xac, 0x14, 0x14, 0x15}}, 0xffffffd7) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:48:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b3d89028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:56 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:57 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={r2, 0x7f}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000800)={r2, 0x1000, "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"}, &(0x7f0000000140)=0x1008) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x4800, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x48, 0x0, {0x0, 0x0, 0x3f00}, [@IFLA_OPERSTATE={0x8, 0xa, 0x10}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0xf0}, 0x0) sendmsg(r3, &(0x7f000001afc8)={&(0x7f0000006000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x81}, 0x3, 0x3, 0x1}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)}, {&(0x7f00000002c0)="7fc2c0c9aa7555332f9394803e74b2544ffc5d41197abab205db5c74fafbe1901b1e6a887966fc89dd4c96ef008862d0598a42d70a99f74390a76a3f1af9f87a", 0x40}, {&(0x7f0000000200)="2cc5d8f0396e7a8b69fa0f660ecaac9fe3b56bbbfb693f60e42bbb8454531cbd4935b5d95059f57ed169ba6306b161c19c5d9eaaee5145dcd339e191119b4181c92ded804d562ec341034d5794ef6cc58daed02eab79484a82b792b1ed1b8007f6", 0x61}], 0x3}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r4 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) connect$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x2, @remote}}, 0x1e) [ 1375.866384][T30993] attempt to access beyond end of device [ 1375.903473][T30993] loop3: rw=4096, want=21, limit=2 [ 1375.945541][T30993] XFS (loop3): SB validate failed with error -5. 11:48:57 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x402000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:48:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b3e89028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1376.031477][T31008] team0: Device ipvlan1 failed to register rx_handler [ 1376.296658][T31019] attempt to access beyond end of device [ 1376.307318][T31019] loop3: rw=4096, want=21, limit=2 11:48:57 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:48:57 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3c03000000000000, 0x0, 0x0, 0x0) [ 1376.347757][T31019] XFS (loop3): SB validate failed with error -5. 11:48:57 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1500000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:57 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x8800, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b4789028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1376.714818][T31043] attempt to access beyond end of device [ 1376.722146][T31043] loop3: rw=4096, want=21, limit=2 [ 1376.733550][T31043] XFS (loop3): SB validate failed with error -5. 11:48:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b7989028efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:58 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x7, 0x0, 0xcb3, 0x6}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000180)=0x8) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42800) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={r7, 0x7f}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000880)={r7, @in6={{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffa}}}, 0x84) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000000600)=""/65) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000580)={0x8, 0x8008, 0x80000000, 0xadbb, r3}, 0x10) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x80002, 0x0) close(r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000f00000008000300d4db2f9491062f0468", @ANYRES32=r10, @ANYBLOB="0500380001000000"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r11, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008084}, 0x20004840) accept(0xffffffffffffffff, 0x0, 0x0) [ 1377.104590][T31058] attempt to access beyond end of device [ 1377.121872][T31058] loop3: rw=4096, want=21, limit=2 11:48:58 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x500000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1377.151648][T31058] XFS (loop3): SB validate failed with error -5. 11:48:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189038efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:58 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1a04000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:58 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0) 11:48:58 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x8900, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1377.625436][T31083] attempt to access beyond end of device [ 1377.632576][T31083] loop3: rw=4096, want=21, limit=2 [ 1377.642063][T31083] XFS (loop3): SB validate failed with error -5. 11:48:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189048efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:59 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000200)=""/165) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000340)=0x401, 0x4) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180), 0x4) write(r1, &(0x7f0000000040)='D', 0x1a000) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = semget$private(0x0, 0x6, 0x1) semtimedop(r3, &(0x7f00000002c0)=[{0x1, 0x6, 0x800}, {0x1, 0x0, 0x800}, {0x4, 0x3, 0x1800}, {0x0, 0xffff, 0x1000}, {0x4, 0x8f, 0x9fbdafaf08ef19c4}, {0x0, 0x1ff, 0x800}, {0x4, 0x4}, {0x3, 0x5e, 0x800}], 0x8, &(0x7f0000000300)) [ 1378.091755][T31105] attempt to access beyond end of device [ 1378.099328][T31105] loop3: rw=4096, want=21, limit=2 [ 1378.114601][T31105] XFS (loop3): SB validate failed with error -5. 11:48:59 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @broadcast, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:48:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189058efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:59 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000240)) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001280)='/dev/ubi_ctrl\x00', 0x14400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) 11:48:59 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x600000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1378.494899][T31125] attempt to access beyond end of device [ 1378.505054][T31125] loop3: rw=4096, want=21, limit=2 [ 1378.517874][T31125] XFS (loop3): SB validate failed with error -5. 11:48:59 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4000000000000000, 0x0, 0x0, 0x0) 11:48:59 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:48:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189068efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:48:59 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x8a00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:48:59 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x101200) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000140)={0x96, ""/150}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x4800, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x48, 0x0, {0x0, 0x0, 0x3f00}, [@IFLA_OPERSTATE={0x8, 0xa, 0x10}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0xf0}, 0x0) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@generic={0x8, "084aa25452777421b6dd91dafbb2db1b40887d54aa701ca397e2b9e9632da550f8c484d27f4cdcd3278185be44beab65512983c761aaf6be3411fa13012f452a53a8b4bfac10ff8b6dae3ce6a9d3493e09f2d3bb20ecb1ed87a082238b1cf2a2c8a775a6c2bcc7fc34c54b00c6faa6bfcc01296738f5a42de316fdf248cb"}, 0x80}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:00 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1379.019584][T31166] team0: Device ipvlan1 failed to register rx_handler [ 1379.086334][T31163] attempt to access beyond end of device [ 1379.095155][T31163] loop3: rw=4096, want=21, limit=2 [ 1379.112746][T31163] XFS (loop3): SB validate failed with error -5. 11:49:00 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='+', 0x1}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189078efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:00 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000001a80)="aefdda9d240000005a90f57f0770bbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b4605f4ed24d2549c814b47b220bd328cf66e76c3d6000000000f90acb294318a76b2e2d32503c63698768e972269842526d3d7b469c20d96c030037dd21f808ebeb39727159611f0011409652101211535780449ee34979e7500149bc000d2ab5b120d2556db189dd552b1b40b2cbf2718517356c6690110a67e0b7b33e5e13a6f2bca2f12322cdd6822772701a89cfbb242ac0e9c2f097f0ddc6f77b24c7b70d75148d86b718", 0xd4}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600097704a71e023a27b2", 0x2b}], 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) sendfile(r1, r2, &(0x7f0000000140), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) syz_mount_image$hfsplus(&(0x7f0000000480)='hfsplus\x00', &(0x7f00000004c0)='./file0\x00', 0x1, 0x8, &(0x7f0000001900)=[{&(0x7f0000000500)="ce533c5bbfb720290e9f112dd4029325bb2447fb7df41ed02e4e958e1fc8d68f65446f8ff7b1f709af502ba53399ead382e411c969957d05df5d80814c2886e127c01d1a9e8afd4e6c67c0f5c8e1dee7310c5373457e84f5231e7701439b2ce611fd8d248e5003ac2745f1648eba307ed7310d2614d562043f72767d35c543578ce361fbed74d822a3f59a9efdadf10873d4b05c22670a623e675ce771f0ce2e0b73dadaaaa9de27d1964b3fa92f4619921dc18905cace18e51e50c119127e256d6c8cbc15ecf3a6e79f2d3b955a40c57e08c5f0c9a004b72d2000e81bf204d4c114c0edecb913404a778706edb48a164ffe12691d8e", 0xf6, 0x8}, {&(0x7f0000000600)="deb267b1401ec590c2cd8a370649e919f3a5a7c556536afe310109206434bf7d3096b53d485f1122604cbf3545fbabe8826b0c5ee20970c1238143768f4dab941048db", 0x43, 0x1f}, {&(0x7f0000000680)="9c66de5d9357da30d66b0f26bbd4628e50a4dceef333495e51e410c8ca6aaaa1854857da19c81007bee0c05cf50f5319bbe4395380d9ace08f2e650877d813f426b001eb62d2e05965b069db", 0x4c, 0x3}, {&(0x7f0000000700)="9f91fec4c2c3b02db873cb1b31c2ff6a066f335a274eaf8fcef15710718ca346b041d3f464f9cb46d8b8ad291dd7f2569860963bb62e42ce", 0x38, 0x80}, {&(0x7f0000000740)="00ae45f244d6bbb3a38581b7fa45af0c136907178c0661fa13430edd663ff48097ab1e8c414354b7d1f8e20ccbd6889f9b04840fac80b55b7abc5d06d319224b3c4199764e89e0650b5139089164f6756f38350553eb7154a301c5c65f1163e1dbef88a82a7962dd0e77ccce5331a32c0597a74407d1e903c27653362b9c64c2d28a262e6c32", 0x86, 0xffffffff}, {&(0x7f0000000800)="df8119ee6da54d6205e69a98f93614671fb0a92d55774ed87254febea4456118d23d535b91f25997fa857cb77175a7fd297244faa1777f4ef3d8b040dd08f425197d7830d11537f5ac3c69ee39a9c3430532564558b5723ee0d29d7e5663f13101e1c0aa257120e01b3bbdec9b9454281cdcb7231f182a2f", 0x78, 0xffffffffffffff00}, {&(0x7f0000000880)="08221aa2a1f822be06c3e913e2b6a0da41747bf267b00bd83a15a528a5e923c6b03d3c4ecb481e86eadd005d8cf09a1ec072f09b6896a24e20a3fc330eae7c8b02c0a23c3f528069c27f59087a7fe87a43fa49c540d72b67e34b3d4e66fe176cf13f86bb9496f03665c17a07fe7581df6c49e863cc62ac", 0x77, 0x5}, {&(0x7f0000000900)="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", 0x1000, 0xa8}], 0x200000, &(0x7f00000019c0)={[{@nls={'nls', 0x3d, 'iso8859-2'}}, {@type={'type', 0x3d, "d496d7a1"}}, {@session={'session', 0x3d, 0x6}}, {@gid={'gid', 0x3d, r3}}, {@nobarrier='nobarrier'}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@appraise_type='appraise_type=imasig'}, {@fowner_lt={'fowner<', r5}}]}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r6 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000280)) r7 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x100000, 0x9, {}, {0x1, 0x2, 0xfa, 0x7, 0x8, 0x24, "a055456a"}, 0x1, 0x3, @userptr=0x9, 0x4, 0x0, r7}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25ADDUID(r8, 0x89e1, &(0x7f0000000280)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r9}) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x7f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x800}}, 0x3, 0x4, 0x0, 0xfffff801, 0x10, 0x1000, 0x92}, &(0x7f0000000380)=0x9c) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000003c0)={r10, 0x6a, "54052cc6cdf5c3dae57d00cd25af23f7770243caf2a10c2789fb9c1cc76c79a9f69376f144424eb46a88b4802850f45726d1a8fa3f9795e9f9907b9c12d861224ef3cf88328cfa0d2038fe71ffc2b6f1089e4f15a3124280a0790629cc6736f26d1c9ccc97586c4d534b"}, &(0x7f0000000440)=0x72) 11:49:00 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x700000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:49:00 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4253465800000000, 0x0, 0x0, 0x0) [ 1379.733405][T31189] attempt to access beyond end of device [ 1379.740721][T31189] loop3: rw=4096, want=21, limit=2 [ 1379.751563][T31189] XFS (loop3): SB validate failed with error -5. [ 1379.753752][T31200] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 1379.753752][T31200] program syz-executor.4 not setting count and/or reply_len properly 11:49:00 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x401f000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189088efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:01 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x8b00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:49:01 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000140)={0x0, @reserved}) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80}, 0x1000) write(r1, &(0x7f0000000040)='D', 0x1a000) [ 1380.320458][T31219] attempt to access beyond end of device [ 1380.328377][T31219] loop3: rw=4096, want=21, limit=2 [ 1380.336916][T31219] XFS (loop3): SB validate failed with error -5. 11:49:01 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x0, 0xeb, 0x2, {0xb, @vbi={0xffffffff, 0x7, 0x3, 0x41414270, [0x6, 0xbb2c], [0x80000000, 0x20], 0x3}}, 0x8}) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:01 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4d01000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189098efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:01 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf1d648abe0e8199bd563519d7669933c25283dca02cd1f588721051dc9fe6bfb1604d42041dabc17619e9866e478cf248cf4c73"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x4, 0xffff}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={r2, 0x422}, 0x8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x0, 0x0) write$FUSE_IOCTL(r3, &(0x7f0000000180)={0x20, 0xfffffffffffffff5, 0x8, {0x9, 0x4, 0x31e00000, 0x6}}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:01 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4a00000000000000, 0x0, 0x0, 0x0) [ 1380.794746][T31243] attempt to access beyond end of device [ 1380.800998][T31243] loop3: rw=4096, want=21, limit=2 [ 1380.807766][T31243] XFS (loop3): SB validate failed with error -5. 11:49:02 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x800000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:49:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b01890a8efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:02 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x24) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000300)={'filter\x00', 0x8c, "19abcdea1476f62cafa60a01f7fb5ae83d218b590635be23f4ea4ee0ab424ab3ab2614f72103954c8bf2b5344be483691252fcb3b79c442f3308bde10cc85ae5c74c194f0d853865ea9b9dc8b146f57d2085c4b05ef768ae68bd114ee644f4d3ebba2264ba3cfd26264234041f8a005dbe83bd3ea835844e2fb27f6bec87efc2b6378deb14bcb45c98fe3094"}, &(0x7f00000003c0)=0xb0) lremovexattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@random={'os2.', '&lo\x00'}) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, [], @raw_data=[0x6, 0x200, 0xfffffffb, 0x4bd, 0x800, 0x9, 0x1, 0x6, 0x4, 0x9, 0x6000, 0x7, 0x605c, 0x7, 0x10000, 0xb93983e5, 0x0, 0xc1a, 0x1, 0x2, 0x1ff, 0x3, 0x8, 0x1000, 0xfffffff7, 0x9, 0x7, 0x3f, 0xc0000000, 0x4, 0xff, 0x7]}) write(r1, &(0x7f0000000040)='D', 0x1a000) 11:49:02 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x8c00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1381.222796][T31267] attempt to access beyond end of device [ 1381.229201][T31267] loop3: rw=4096, want=21, limit=2 [ 1381.237880][T31267] XFS (loop3): SB validate failed with error -5. 11:49:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189108efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:02 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e26, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:02 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:02 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) ioctl$RTC_WIE_OFF(r1, 0x7010) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0xfff) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@ax25={{0x3, @default, 0x7}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) [ 1381.714457][T31290] attempt to access beyond end of device [ 1381.720251][T31290] loop3: rw=4096, want=21, limit=2 [ 1381.730052][T31290] XFS (loop3): SB validate failed with error -5. 11:49:02 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x5402000000000000, 0x0, 0x0, 0x0) 11:49:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189148efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:03 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x6}, 0x8) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={r2, 0x7f}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e22, 0x7, @mcast1, 0x9}}, 0xffffffff, 0x20, 0x3ff, 0x8, 0x8, 0x9, 0x72}, 0x9c) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:03 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7c15000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:03 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x900000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1382.151410][T31315] attempt to access beyond end of device [ 1382.161652][T31315] loop3: rw=4096, want=21, limit=2 [ 1382.173535][T31315] XFS (loop3): SB validate failed with error -5. 11:49:03 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x8d00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:49:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189158efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1382.592148][T31343] attempt to access beyond end of device [ 1382.597989][T31343] loop3: rw=4096, want=21, limit=2 [ 1382.608745][T31343] XFS (loop3): SB validate failed with error -5. 11:49:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b01893d8efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:04 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x639fb505f9000000, 0x0, 0x0, 0x0) [ 1382.882264][T31355] attempt to access beyond end of device [ 1382.889576][T31355] loop3: rw=4096, want=21, limit=2 [ 1382.916714][T31355] XFS (loop3): SB validate failed with error -5. 11:49:04 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b01893e8efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:04 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:04 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x8e00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:49:04 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xa00000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1383.468804][T31378] attempt to access beyond end of device [ 1383.474812][T31378] loop3: rw=4096, want=21, limit=2 [ 1383.536375][T31378] XFS (loop3): SB validate failed with error -5. 11:49:04 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) r3 = accept4$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c, 0x800) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x521000, 0x0) write$UHID_CREATE2(r4, &(0x7f00000002c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x1f, 0x81, 0xfff, 0x4, 0xb0}}, 0x118) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) mount$9p_virtio(&(0x7f0000000400)='syz\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x8000, &(0x7f00000004c0)={'trans=virtio,', {[{@access_uid={'access', 0x3d, 0xee00}}, {@debug={'debug', 0x3d, 0x80000000}}, {@cache_none='cache=none'}, {@fscache='fscache'}, {@access_user='access=user'}, {@uname={'uname', 0x3d, 'syz0\x00'}}, {@aname={'aname', 0x3d, '/dev/hwrng\x00'}}, {@access_user='access=user'}, {@access_uid={'access', 0x3d, r2}}, {@version_9p2000='version=9p2000'}], [{@audit='audit'}, {@smackfsfloor={'smackfsfloor'}}, {@appraise='appraise'}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfshat={'smackfshat', 0x3d, ']&wlan0selinux#ppp1'}}, {@fowner_gt={'fowner>', r6}}, {@smackfstransmute={'smackfstransmute'}}, {@smackfsroot={'smackfsroot', 0x3d, 'scgroup'}}, {@fowner_eq={'fowner', 0x3d, r8}}, {@uid_gt={'uid>', 0xee01}}]}}) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189628efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:05 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x200}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:05 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x6801000000000000, 0x0, 0x0, 0x0) [ 1384.033720][T31409] attempt to access beyond end of device 11:49:05 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9a02000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1384.085545][T31409] loop3: rw=4096, want=21, limit=2 [ 1384.172280][T31409] XFS (loop3): SB validate failed with error -5. 11:49:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189638efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:05 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet6(0xa, 0x3, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x100010, r1, 0x44d64000) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={r3, 0x7f}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r3}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:05 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xc00000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1384.508328][T31434] attempt to access beyond end of device [ 1384.555753][T31434] loop3: rw=4096, want=21, limit=2 [ 1384.618008][T31434] XFS (loop3): SB validate failed with error -5. 11:49:05 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa00f000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:05 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x8f00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:49:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b01897a8efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:06 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x6802000000000000, 0x0, 0x0, 0x0) [ 1385.177465][T31467] attempt to access beyond end of device [ 1385.187447][T31467] loop3: rw=4096, want=21, limit=2 [ 1385.198434][T31467] XFS (loop3): SB validate failed with error -5. 11:49:06 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc340245ff4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b01897c8efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:06 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0xfffffffffffffe5b) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000640)={0x8, "003084a476a240169d20cc13da7b828f678acddc890bebf4702949d0c768025f5fd3d8f75429d533caccea2a2d36cffb1f43da57cdcc628a520634d7d43682eee0d000bf4051f02345793fe0ce6a74ff4d9cf4c2a584f396f4a7f6b43cdb969d1e2c3f03e5b2d5e6105f8c80d5edeb897c14d162179b26df950db85421cf3c593159b9aa48c995be1eda0f2c7cafa0e9e978842631a373abedb82382b66af19b2c3d1748d3b0dd4943b6583965918ac1bd4dc7b3c4ae80fa7a7757b4e47fbb376ca9d5b35232c15f22c5285e2354f5640017e731eae9ab65ba9afe2d5949ecc5476a4d03bda8a72b64f5943bf5e71b1e42605ad06a06ebb84a8f0195d4e9ff712b87871ffe01d9449389885c44bb104a56d6003c33542df397c13f77b383912ff96839164ea0624bbae07d8415cae2ba32c4f4d8ff88c45fe0ff7d0e4b1a77d802bda26e9efcff18745a146b10d2a5e3b911317b8ab093d7047cc26fdfcedb09f54e7838769460939c9454d159d96ccf4e444470dfde912af30478433cc3df983296adb62d142aa0ebb2503c32c4cb011809949a5336021177f683fc22762f34f233673f53e4af0cc698a090a8e7430b81e2213e523b48a413a735939f2fd1620921735511649d3db89555f4c6cb069367f68d8c2cfc2f81005d87b50367374e6e1d3316375cd5c3f9ee3460221ff242d3f77af2f986fdf5ea24e04178fb204b"}) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480020000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007040000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @empty}, &(0x7f0000000200)=0xc) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000006000)=@xdp={0x2c, 0x8, r2, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="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"/262, 0x106}], 0x1}, 0x40800) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000280)) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000080)={0xa, 0x4, 0x1000, 0x8, 'syz1\x00', 0x800}) write(r0, &(0x7f0000000040)='D', 0x1a000) modify_ldt$read(0x0, &(0x7f0000000580)=""/164, 0xa4) 11:49:06 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) [ 1385.660680][T31489] attempt to access beyond end of device [ 1385.687462][T31489] loop3: rw=4096, want=21, limit=2 [ 1385.724284][T31489] XFS (loop3): SB validate failed with error -5. 11:49:06 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)) 11:49:06 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xd00000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:49:07 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x140c1, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000200)=0x400, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000240)={0x3a12, 0x15, [{0xf}, {0xf, 0x1}, {0x5, 0x1}, {0x9}, {0xc, 0x1}, {0x9, 0x1}, {0x6}, {0xa, 0x1}, {0x9, 0x1}, {0x6}, {0xa}, {0x6}, {0x0, 0x1}, {0x7a}, {0xc}, {0xe, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0xb, 0x1}, {0x0, 0x1}]}) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000340)) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x4800, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x48, 0x0, {0x0, 0x0, 0x3f00}, [@IFLA_OPERSTATE={0x8, 0xa, 0x10}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0xf0}, 0x0) sendmsg(r4, &(0x7f0000000140)={&(0x7f0000006000)=@rc={0x1f, @any, 0x7f}, 0x80}, 0x200400c0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:07 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x9000, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:49:07 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x7000000000000000, 0x0, 0x0, 0x0) 11:49:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189c48efa172046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1386.173085][T31523] team0: Device ipvlan1 failed to register rx_handler [ 1386.194379][T31527] attempt to access beyond end of device [ 1386.200480][T31527] loop3: rw=4096, want=21, limit=2 [ 1386.205873][T31527] XFS (loop3): SB validate failed with error -5. 11:49:07 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f0000000740)=ANY=[@ANYBLOB="37d5616207110dcb090b7cb5962cdacbf73a3c70ddff506598e25cdafdbf38babea31a1b219352a977e06d25a74e34d22e5e149758395a7e72a9ca1234c471740fb13136e1644ae50b8f2410418382431379e5e222eead7decf8c7457559f9d51b371dc54355be1ad008af8b7cd789eacba986aa92dcf02120a2c9a25c710a8b58c666e05952376bd7a66548391d820b0459153f682aa46357f3e6fee0ab5010f37b23379d89edd65e6de4a07f7a92ec29ba27597184fe570a92904de406843200b91eaf074dc02d59d24f", @ANYBLOB="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", @ANYRESOCT, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESOCT=r2, @ANYRES16=0x0, @ANYBLOB="2bd263658d3e18b845a9abe197a5a4e0745f7da2636fad361750a729def69c69c9bd9760d14f80988ec0244483c0645ae87663e0a18f42df72cdcc4bf09a9b19b83dfef407995695de317d8db6216f94f1308be58eaf51402ecf0a190e6e5c62e7cc5a250fb69d433fdb40566eecae7a9a4e6922cb22ad2d5ba467270ec704a7386aee8d82b5a21bb0825a5e38332b9c390ab7", @ANYRESDEC=r1, @ANYPTR64, @ANYBLOB="b5e0c7790a09e0f5060f59143b2a189dfc184e63cb9cdde1aaa36c3f04665a775da00b8d77e6ded6b46163d92674ff70a559d6f9fcbf8965642daa2e09598631c9f9b9e25940a381ab58c645b9cb8135948c2c2c644e7f1ac1f96f76abefc47ad831808fa922006c6e04477f880e4dba334fae356f58b6d3eb73a8af3c031b9abbc48c862e01242bd22bf5a102fdc8a18012bce15108ee6546cce6c346eda442b596b587caaf0d0bba363585bbfd8630", @ANYRESDEC], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRES16, @ANYRES32], @ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYBLOB="2d47bd5335dbcd4f87a198d2b2a47fa0080f8f38d2fa4709d485b5358e57956f1cc3a584e1519dfb04ced154"]], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000180)=0x1e) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa302046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:07 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfeffffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:07 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0xfffe, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) timerfd_create(0x8, 0x80800) [ 1386.742346][T31548] attempt to access beyond end of device [ 1386.752340][T31548] loop3: rw=4096, want=21, limit=2 [ 1386.759574][T31548] XFS (loop3): SB validate failed with error -5. 11:49:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa3d2046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:08 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0xe00000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:49:08 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x7202000000000000, 0x0, 0x0, 0x0) [ 1387.091928][T31569] attempt to access beyond end of device [ 1387.097731][T31569] loop3: rw=4096, want=21, limit=2 [ 1387.108405][T31569] XFS (loop3): SB validate failed with error -5. 11:49:08 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x9100, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:49:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa3e2046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:08 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) mlockall(0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) [ 1387.509303][T31592] attempt to access beyond end of device [ 1387.515106][T31592] loop3: rw=4096, want=21, limit=2 [ 1387.525998][T31592] XFS (loop3): SB validate failed with error -5. 11:49:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa5d2046762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:08 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1387.965387][T31612] attempt to access beyond end of device [ 1387.973635][T31612] loop3: rw=4096, want=21, limit=2 [ 1387.997906][T31612] XFS (loop3): SB validate failed with error -5. 11:49:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa170a46762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:09 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:09 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x8096980000000000, 0x0, 0x0, 0x0) 11:49:09 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1000000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:49:09 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x9200, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1388.353408][T31627] attempt to access beyond end of device [ 1388.361713][T31627] loop3: rw=4096, want=21, limit=2 [ 1388.367494][T31627] XFS (loop3): SB validate failed with error -5. 11:49:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172546762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1388.918062][T31653] attempt to access beyond end of device [ 1388.923827][T31653] loop3: rw=4096, want=21, limit=2 [ 1388.977187][T31653] XFS (loop3): SB validate failed with error -5. 11:49:10 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172f46762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:10 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1800000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:49:10 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x8cffffff00000000, 0x0, 0x0, 0x0) 11:49:10 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r4, &(0x7f00000006c0)=[{{&(0x7f0000000400)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000440)="7ed6fa8caa49b4a9fd43f7d721f6021791b17ee4538dadefed9ae85dc734cd8541ccbcb6f09aca7dd56d", 0x2a}, {&(0x7f0000000480)="503669a880dd15197aa03383bd21a41efba7cd242b7627980103823e75fe3ba13ba97731e03c11365710b83d09705f5e586687c49cee75b27c9e87afe5a744b15f8a28e287e57f04502fed031e298493d876280f9bd1745c249c66433cc99aa676360eb349b2dc", 0x67}, {&(0x7f0000000500)="2c4714d167368f433a0d3ded3ffc73a509f0a449c89ead9da2cabac660ff787b67721028f6bf94a8eb80b6d7ef9310194a1d8a87ff16f674e8054b9e5759674b579618a3542fb7ef74fdb318b803ae37a7b170", 0x53}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="f03f44508029cddca41d928d0a85e233d6868eafc7e41fbc32a0cac5c58c036e8422c049a2cb875f9bb09e22e8fd1fe2a0349c48f1fd2e50fc9d7457afdb1a701d0a9c9fc2d94746a5b401cdd7389c1a6847ece7738def029266a9e5", 0x5c}], 0x5}}], 0x1, 0x840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="00000000ee42706d9a00000000280012000c00010076657468000200140001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b89aab49ad30a704aa4f574f493a554bd08b3abf111160c5ee6746a0e9a03b182760e556f17156f9573e220fca1bb372eea61fbb4a67b003702e307c1651bbcb8c09d5de2a33ac580443bdc788b1f00f9a3155816be58d23eb1733453372067f9ab361101b5271c4c24642ba2bf25dd22514b92ed55e28140c751b8d4d2a22b00"], 0x74}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44010}, 0x2400c811) r6 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000280)) r7 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f0000000700)=0x76, 0x4) ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, &(0x7f0000000580)) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e22, @loopback}, 0x80}, 0xc000) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:10 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x9300, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1389.581073][T31675] attempt to access beyond end of device [ 1389.615689][T31675] loop3: rw=4096, want=21, limit=2 [ 1389.653640][T31675] XFS (loop3): SB validate failed with error -5. 11:49:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa173d46762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:11 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2c0200, 0x0) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x200) 11:49:11 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1390.151079][T31705] attempt to access beyond end of device [ 1390.185928][T31705] loop3: rw=4096, want=21, limit=2 11:49:11 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7, 0x0, 0x0, 0xffffffff}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) [ 1390.238830][T31705] XFS (loop3): SB validate failed with error -5. 11:49:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa173e46762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:11 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1c02000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:49:11 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x9403000000000000, 0x0, 0x0, 0x0) 11:49:11 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100), 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x80041, 0x0) timerfd_gettime(r1, &(0x7f00000002c0)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xfffffffffffffe76, &(0x7f0000000580)={&(0x7f0000000500)={0x30, r2, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x7fff, @bearer=@udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x30}}, 0x80) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in6={0xa, 0x4e22, 0x40, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}, 0xfffffd3c, &(0x7f0000000000)=[{&(0x7f0000000300)="03ce7f2ee53ae56505bf4125629c051d79d2472ec7e178a4daf56305a9d341df729e452cc934fde121c7347f399026d62b8b54821ebc43018ee877f08d8790c853640fdf8352ba6511e809e187de31f762e6418ed2b5de54aab3d7009e08264a92d1a5a93d80c7607e3dabaa2476c4c7abfe3934a5ef72ab1d859aee4edb4619cb4e625fd003cc9ab814dbe29059b41e43781d42ceb073a7ec675ec7328c2d3ffe36596f593f4e9e0cfebc8057f7c4b92fe243b9c64b7ee6a468fd914c7a8719f719d620d1a8c84bd780683daf2e80fa7a90c881a663db63e1d14ca5280c5e475e", 0xb0}], 0x1}, 0x0) read$snddsp(r1, &(0x7f0000000400)=""/237, 0xfffffffffffffec1) write(r0, &(0x7f0000000040)='D', 0x1a000) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000200)=""/161) 11:49:11 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x9400, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:49:11 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) recvmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f0000000200)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/175, 0xaf}, {&(0x7f0000000340)=""/232, 0xe8}, {&(0x7f0000000440)=""/93, 0x5d}, {&(0x7f00000004c0)=""/109, 0x6d}, {&(0x7f0000000540)=""/172, 0xac}], 0x5, &(0x7f0000000680)=""/66, 0x42}, 0x40000100) write(r0, &(0x7f0000000040)='D', 0x1a000) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyprintk\x00', 0x133000, 0x0) ioctl$KDENABIO(r2, 0x4b36) socket$netlink(0x10, 0x3, 0x12) [ 1390.744022][T31735] attempt to access beyond end of device [ 1390.756485][T31735] loop3: rw=4096, want=21, limit=2 [ 1390.774198][T31735] XFS (loop3): SB validate failed with error -5. 11:49:12 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172004762e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:12 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f00000002c0)) shmctl$IPC_SET(r0, 0x2, &(0x7f0000001800)) shmctl$SHM_UNLOCK(r0, 0xc) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={r2, 0x4}, &(0x7f0000000380)=0x8) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)='*', 0x1}, {&(0x7f0000000140)="302a1e31d33b51aac5b11ec3ef6a0c816c6f71e523226e208c800a984f51836b79d999963a37cef629d3defd3c24160f241d908180ef167c6684054a005e3be3334bd7a6d82ceb51a3f5", 0x4a}, {&(0x7f0000000200)="cd105d4a3b2a4d8090a1e080978f889d01a8b9229bf392f32fccb31ad5c7441cda60e52c286c6b92e03fa15c367a8c2e485a14ec9227025cb111ef98174c0d41e1", 0x41}], 0x3}, 0x0) write(r1, &(0x7f0000000040)='D', 0x1a000) [ 1391.334078][T31763] attempt to access beyond end of device [ 1391.361859][T31763] loop3: rw=4096, want=21, limit=2 [ 1391.380650][T31763] XFS (loop3): SB validate failed with error -5. 11:49:12 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046042e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:12 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={r2, 0x7f}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000200)={r2, 0xa3, "29e4466d84aefd77ac5ba5f394b690e445b8de1b919d860ae21d404b3acbfc183cb5efeff3c9a6c29cd79d2fd25e8c47cba7a63c16a46bc42da0bbb87b9d53b5cc6753958c72c7e32f04c5e50862f957ad6bed86549c71e39f352f5d9b3159834ef1ec25b89ebd82a21181df034d74bad5d82db57184fb5e6499e03e95d8c0009e8db19195ea779565d3e6b32a9d3591caf95d13ba264b2415cab189aef75073a4fc8e"}, &(0x7f0000000140)=0xab) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r3, 0x7}, 0x8) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:12 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1e00000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:49:12 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xa800000000000000, 0x0, 0x0, 0x0) [ 1391.855291][T31789] attempt to access beyond end of device [ 1391.861128][T31789] loop3: rw=4096, want=21, limit=2 [ 1391.887578][T31789] XFS (loop3): SB validate failed with error -5. 11:49:13 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x9500, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:49:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa1720460a2e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1392.302291][T31813] attempt to access beyond end of device [ 1392.316144][T31813] loop3: rw=4096, want=21, limit=2 [ 1392.344427][T31813] XFS (loop3): SB validate failed with error -5. 11:49:13 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046252e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:13 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)='*', 0x1}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r2 = accept$nfc_llcp(r1, &(0x7f00000001c0), &(0x7f0000000000)=0x60) sendmmsg$inet(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="5be327f290d75f142c4b72ad35d2769cf405ddb8920fc299d822c5666f5b249876ef9ab17e32ab3e2daaafaa493ad87561ecd94f267c6a6d1f2838db8ce3fd68061490457cfd777111579492293a1c74821229fe82f5476c7dc1d996766ba28057fba43bc32a9c1c57563f650dc0e9d503beb6017b8a403f1d50a70622a49a4d4a4e1caca74046baccac8c4068d1e1d5144ae925d46ead7401cda183ef7bc7", 0x9f}, {&(0x7f0000000300)="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", 0xfe}], 0x2}}], 0x1, 0x800) 11:49:14 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xb903000000000000, 0x0, 0x0, 0x0) [ 1392.758139][T31833] attempt to access beyond end of device [ 1392.768499][T31833] loop3: rw=4096, want=21, limit=2 [ 1392.782966][T31833] XFS (loop3): SB validate failed with error -5. 11:49:14 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x2000000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:49:14 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@l2={0x1f, 0x400, @none, 0x9, 0x2}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa1720465c2e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:14 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x9600, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:49:14 executing program 4: r0 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000440)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000004c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r2, 0x1}}, 0x18) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x20000, 0x0) open_tree(r3, &(0x7f0000000180)='./file0\x00', 0x1) bind$inet(r1, &(0x7f0000000500)={0x2, 0x4e24, @multicast1}, 0x10) 11:49:14 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)=0x6e) syncfs(r1) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) [ 1393.366676][T31869] attempt to access beyond end of device [ 1393.402070][T31869] loop3: rw=4096, want=21, limit=2 [ 1393.488713][T31869] XFS (loop3): SB validate failed with error -5. 11:49:14 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046760a9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:14 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) r3 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r4 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x5, 0x10, 0x7fffffff, 0x0, 0x5}, &(0x7f00000003c0)=0x14) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000400)=r5, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x0, 0xffffff60, 0x7f, 0x200, r1, 0x3f, [], 0x0, r2, 0x1, 0x4}, 0x3c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r6, &(0x7f0000000180), &(0x7f0000000200)=""/231}, 0x20) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:15 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xc002000000000000, 0x0, 0x0, 0x0) 11:49:15 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x2010000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1393.933975][T31893] attempt to access beyond end of device [ 1393.940971][T31893] loop3: rw=4096, want=21, limit=2 [ 1393.948543][T31893] XFS (loop3): SB validate failed with error -5. 11:49:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa17204676259607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:15 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:15 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0xff, 0xffffffc0}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 11:49:15 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000001200)={0x10001, {{0x2, 0x4e22, @empty}}}, 0x88) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000180)=0x10001, 0x4) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendto$inet(r1, &(0x7f0000000200)="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", 0x1000, 0x40858, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:15 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x9700, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1394.374785][T31920] attempt to access beyond end of device [ 1394.380699][T31920] loop3: rw=4096, want=21, limit=2 [ 1394.392333][T31920] XFS (loop3): SB validate failed with error -5. 11:49:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762f9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:15 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x10) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000180)) [ 1394.833610][T31946] attempt to access beyond end of device [ 1394.871744][T31946] loop3: rw=4096, want=21, limit=2 11:49:16 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000140)='D', 0x1) [ 1394.898560][T31946] XFS (loop3): SB validate failed with error -5. 11:49:16 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xc400000000000000, 0x0, 0x0, 0x0) 11:49:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046763d9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:16 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:16 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x2300000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:49:16 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) [ 1395.511223][T31977] attempt to access beyond end of device [ 1395.517760][T31977] loop3: rw=4096, want=21, limit=2 [ 1395.540056][T31977] XFS (loop3): SB validate failed with error -5. 11:49:16 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x9800, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:49:16 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000140)={{0x2c, @broadcast, 0x4e20, 0x0, 'wlc\x00', 0x10, 0x100, 0x79}, {@empty, 0x4e20, 0x0, 0x7fffffff, 0x10001, 0x80000001}}, 0x44) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046763e9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:17 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x54200, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42800) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x258002, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180), &(0x7f0000000200)=0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e1c, @multicast1}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:17 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xc700000000000000, 0x0, 0x0, 0x0) [ 1395.934373][T32003] attempt to access beyond end of device [ 1395.941497][T32003] loop3: rw=4096, want=21, limit=2 [ 1395.990055][T32003] XFS (loop3): SB validate failed with error -5. 11:49:17 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046765c9607dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:17 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180)=0x3, 0x4) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) r2 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x0, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f00000001c0)) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @empty}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)='*', 0x1}], 0x1}, 0x48000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x90, r3, 0x8, 0x0, 0x25dfdbfd, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8041}, 0x40000) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:17 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x2407529412010000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:49:17 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) close(r1) [ 1396.535416][T32030] attempt to access beyond end of device [ 1396.568483][T32030] loop3: rw=4096, want=21, limit=2 11:49:17 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x9900, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1396.634045][T32030] XFS (loop3): SB validate failed with error -5. 11:49:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9606dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:18 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x8, 0x7, 0x7, 0x80}, 0x4e) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x7fffffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}, 0x1c) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) ioctl$SNDRV_PCM_IOCTL_XRUN(r1, 0x4148, 0x0) 11:49:18 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:18 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xcc00000000000000, 0x0, 0x0, 0x0) 11:49:18 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) recvfrom$inet(r1, &(0x7f0000000140)=""/102, 0x66, 0x6002, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) [ 1397.277388][T32067] attempt to access beyond end of device [ 1397.300753][T32067] loop3: rw=4096, want=21, limit=2 [ 1397.336109][T32067] XFS (loop3): SB validate failed with error -5. 11:49:18 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@rc={0x1f, @none, 0x80}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x4800, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x48, 0x0, {0x0, 0x0, 0x3f00}, [@IFLA_OPERSTATE={0x8, 0xa, 0x10}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0xf0}, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000004f40)={0x0, 'veth0_to_team\x00', {}, 0x6}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000100"/20, @ANYRES32=r7, @ANYBLOB="00000000ee42706d9a00000000280012000c00010076657468000200140001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b89aab49ad30a704aa4f574f493a554bd08b3abf111160c5ee6746a0e9a03b182760e556f17156f9573e220fca1bb372eea61fbb4a67b003702e307c1651bbcb8c09d5de2a33ac580443bdc788b1f00f9a3155816be58d23eb1733453372067f9ab361101b5271c4c24642ba2bf25dd22514b92ed55e28140c751b8d4d2a22b00"], 0x74}}, 0x0) sendmmsg(r1, &(0x7f0000003740)=[{{&(0x7f0000000300)=@ll={0x11, 0x2, r3, 0x1, 0x5a, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="b91b6c460640bc96", 0x8}, {&(0x7f0000000380)="dedd49aeeea39fd2d78153f28db91bd900a59be54a5d7d97341e47d333b8754a455909c1579964f28ca5e31e0b35fa5cb5c2d8b6a54b60b9da8662dff81b851e60ef223501225357466e2e64ae59b8384e8d40cd0bbe5e20c9cf6048c9072b6520c36f8cc334421f2524cb1bdd9f1c9184a8f5b697040670fb3e81a0ae10e9ab6f4df8760c51422713fb43ae34b89fb8628aee30fa5259049dccb2c8ef1d16b1ffca25633afd6f737ede4e3f2b618237a5a9bdf545b6feaabffba86acf861cab3e4adaa5f45d48fc4ab5d634ac888cecfabcaf2911", 0xd5}, {&(0x7f0000000480)="bbd1b3bd01cbb27c5dc258a304a7160ac9f51d4564e1cb", 0x17}, {&(0x7f00000004c0)="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", 0xfa}, {&(0x7f00000005c0)="03cef011eb855abd7eaf8aeba8d19273e48289af73387b1d835716ce21bf743b3c3db33eae32ec28c8d76b1f9c2468c60f75f1dd46f01bb94e9d5188aa4d6f30b83209e76948716f3f79ed7ab7715012d165e3ed6877d729c903244eba9b689de7f35d78485179c99c176a6af2ad7ccac22c7081a0cf106d9edae682ffe01431ccc13021da769a3c6486db91418f8d95db39f25c4a7b0f88d9ebcf3adb74820311f433238624dfc4d03b1762bfe8ef72cc56d2704c5b638d23416f173fea2b4bcd0a589167a068dd7bd1ebfba0d8f4ba3cce3691db01901124be14e6b2a3e995b9d8932df58e20f14fc1ef2f7628", 0xee}], 0x5, &(0x7f0000000740)=[{0x50, 0x10d, 0x2, "fec941955a76076bce4213cbe25dfa2d12314f1049edcef4544be9f5ce3c5dfdc9160a53ca198d3f7ff4293625dd7f00809ea8db1f7a871859320b7be972"}, {0x100, 0x103, 0x7ff, "80c0327420500f897600eb8e7a8badeb105e7c38349733de993d7d1bcc12716a4a43b6e7913a2b5cc5a203bd734fe0d1bccfff1dad677548dfa430dee2ae762e198a195adb6b7588361b43c5186e7f56180d42c96ebe4d673e1678d775bd9cc99bae13537a31a06c640e5bfa4f33ca6a1f7adc6775978388b4cd3e9a9f08fee1e623bb20b3b3961098b547e0099b70ae0bd0d07038dfc213ec6ed5a3d7c1183c714ed6fd408e536d59ff1bf026b96cad0084d5a6d287bd99ca94983904a1e08f0a1e17569580cf70dbc112723a624cd7ffc5cd6d0fd2fedc856b1b10f2e6c1a23ee88f17063202971a3e836790ebca"}, {0xf8, 0x103, 0x3ff, "cd834f085b21da6ee3c21237956e382dd25e14e68dcd3feeadbf628309216404ba7e8c773246cedd2bc3204004710c2100a57b85a9e667c70efd605cead001de4071b1fd13bee598d688cd0399b1a5b4a6cfc0f56649d3d8b7ab6316c3f767d476cfffd7c7c7884cbbb7e876bfb751e8debb622614a1c4781677c9eb3cd401f54f58c77c1be3e917f3d1df8a31057f8f6a0a20a9cef154c1960635b27625c98108102a75e7484735564cc92051a0824a0e96330b944cf928c2cc7b69c8ef5c110f234a40918cc45410bd3547a6883c60ef0c74ee3bf2984258c6adc0b99b268f1dcacccaec"}, {0x58, 0x101, 0xffff8002, "83c1c3324f0c4e2bece5a680b0f85cfabee059b966cc7b839cbd41f807cc3b74032449a038bc5c22c0dc792bc8ae343d2d57f958af9ce9dad294d2196b51d2afd2d86027140b3a"}, {0x58, 0x10e, 0xffffc2e6, "470f7dfe04c6f07b6659cae4098fa757158427992849076680cbeaaf75277c48f807baec8cc3e2f54e017ceae82643c18053eac710fc356cb5f02dcd705857ab0a51a326b0"}, {0xd8, 0x102, 0x1, "5b46286ad5365d7219814ec3580bae9d027cbee991688f9a7790808ef48b11a31599315f68185abfcc32fca6435f4ca3f36ce7cdd64a566042eeb55f0b692ccaa841bdfb73c6d7fff80a56d55eaeb8f50b5cbe586fe30798b83b7ad5bd104d787e1b1e5f46a5e37eab60c03312094d4ddc7f5a3ea69ba01e16676ce0de8e0d9e03403588d69141d1dd54932e67b78f51ddf130b73a3e3be997890556be261dacbbd9ae1a3d357c44b870741648b72b116d2b245189dba2b79a0abee52d9a9fb18e28457c07"}, {0x110, 0xf91cbabea7af4127, 0x4, "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"}], 0x4e0}}, {{&(0x7f0000000c40)=@can={0x1d, r7}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000cc0)="7fe7fb8f64d10e5b89747c13699384f83170742c83eebf8d6903e0cbe890ee171237aed2fc25ab0e1f77779a737db713653758b15996c70c31eac5788e61e8e48a9ac9b59f8d1e62dcf22f98c3c8b9fdc70ac4fe3d087fcac91d2e4c655e1ec5edd8787d22da690f3ccdc949f710810e439980e637d37913cf3a642144ce339befe1ca66552bafad353b3b4f9d14a59173908393adf956cfa9500d11f28a0654c1e6d80cdb6e22bc9f3c3ed54959f03871c98d7779793bf00af9", 0xba}, {&(0x7f0000003880)="a221a3a2a26fe2483392f337ec14772740ac08216d2c085dca5c3139b1fb4c7d20b6e3b13dc6507bfb40d0d821ec128685f8773c0164319838ed002275b6009070796c0ecf41a2f94165d843bc03042be89610401f6235fd2cec17f51460a8bd6c345675353b072d4a4e23d9e3c17037f538c44c937aa9aeecf7c4b6981c86e79ce74b1c561981c2f674b0a9294ac15798db45f67837a770581729e28923256ac78eff9722", 0xa5}], 0x2, &(0x7f0000000e80)=[{0x1010, 0x116, 0x0, "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"}, {0x100, 0x84, 0x0, "c793a94af55c6413c79d52fb7dc8f1c248130067faedb556077864d28ebb4acb256cf12e646996bef1292c5d560c12516138dc92b684113031bfeb67980bec9ad7d0c44f4dca1d3092488f3c8eeb4ca538fe33c8f0262054afa98019685ae2107b1f4b7185e39b3785f4b8b1de3c04a299b73827da5af4b9b67584397db2343bc9e58abbd368062c8aada5872a47a7605eaebbc297346570b97c184432588a00ef2355e4eb4abbc581281bb48326b410010f0ce4bd26f0ace3621dcac815255cede67a31c546a62b3d80a96a871477ab7b674778c8c58666b357f521a3917b0b49e13bf06176bacc44d60b"}, {0x10, 0x114}, {0x48, 0x6, 0x401, "bfaea208c5120665f2d800e16cbf130d872e357aeac5636b661781d08574e4226d5f671fc694d5602fab0118248690e0b8c78d0c"}, {0x108, 0x10a, 0x0, "a728baf6c2483593bdff4fcc5e8e6f914514709b36b67ffa574b652beed74a0f53ae285ffd6264cf6157d6a51a3f96247e359366cf7da8a1b7602d5be82d017eada53600e1ab224da01ab44821d5f64c555d63f781e98eaaff4144c198f057c4fafb0ce3f658cf7d6f6ee7bf219f0a254e566427402a133cc73c3bb6d9fb47128d8472e4addece7cd103ae1dd286391c98aa053889fd2079e830f0566a4cf08fa5de5c7fe3a1aa101d26e433f641b65dd21d22f4a8bfb5c11b08f4548b811e7cf97513010b1005a5ffb03d2137ccfe202deb0e9993a766e1ff47d559f4aadcafcb2f6a564d8bc292ac660716376dffa75443161b745d21"}, {0x18, 0x111, 0x1, "86b8c043ce1ca0"}, {0xf0, 0x117, 0x3, "bdbb90931a93c1f59d60a9b7c80d5767af905aea17bad7dabca934d589624aea26c1ca39146793e08d8ab2f43f53e0e681c9b766bd537e5f051ce02cc190242621b3454c06bf3d48d1814f843cfcfcf82ed4d41d78232c18ee00277c811ba06da2d5ad24c54ac2bcf5ed941600e9ac44bd99be08d288324688e89b84ba74e57d34c10bf1044c0396d67780b1f451ee539a1f1717071bc9993e28664fcbb64df67307dff27b7a424423a9d7b1362e7e0881f8bf3100b18861ce07ea4cf15a0e1466405eda4d921e80f03fe00822882a3376e31e12122946045c"}, {0x90, 0x10e, 0x5, "eb17edfaa9d3c8fea826143c7f38a95975257c8240d84cf9492dc6fa91365ac909e12305f18f906110aa4368e107f3357b587efe270c1f302e2bac2fc4c617af207fec1b0685bec1595c194202b2b3ceb380c132749b3fd13febe77b9adc4412ecf97a53cd2c64ab4fbe07a595c15869c4465d0aa273c0589a9390ab"}, {0x50, 0x105, 0x401, "bda0005033d4715355c67daaef17dd1a9695ae8ee3459f45e05573a2e78ea9bd91d110d14975b6aa9a9c048e48576f67d776ee4cfa369077e6957689b15860c7"}, {0x90, 0x112, 0x5, "fafda51fc4c3b3f1ed2fd68eaed2b5377fa18e23698904134cef3e7f5336c30fd75a8cd198c76687b25a84c822304f2a38526a7126bb28132a27c531ac33f6effe5f491d251f89508144ba5e1a242dbf610f18f7695ab2092ac90130eae06ada4b833b3ebf7673d237547ff70e05e5063e438c30d680f045df3b74d1d652"}], 0x14e8}}, {{&(0x7f0000002380)=@isdn={0x22, 0x11, 0x8a, 0x8, 0x80}, 0x80, &(0x7f0000003580)=[{&(0x7f0000002400)="30e34dcf4fdbaa17e0635052eb84570752a8031c7720a7ebf75ab5b2164ef3c4b438acf3dfc91feaea76f59eab68bc595e3779c9d259e9759410acfc050334d3d3a8046fd67f22f536f2fcba02b059da4c60c9a7f3a4d473e77bce0aadef0ac18f78b280dc498b1588af88cbd7f73df1fead6b8f13a5087107718bab37a916e0193e1f1a2549984e0739d558e143cc57cc9986570c8122861a01a7c9718ce3ecca8e529ea2362774b19c1a091a40acef781999d5117f4ba4280b484076bb10a286fcc74c5c0a52776e184989a44ec309615a1a2b8c5dc6eaa9e9b655669120540a412ff80c743bc7b66f4b5c268cbfd1fc890b84f8cac884bab91cb5080e7444a9a70415189def004ea58e2529f35192ebc073afdff91e12f8e75785cd4402562f5fc7344ba3cdd7afbd7264d2963b0eca39f76e4c3be362ed9d2ac4522c29eecef9774b09bd4065107154bfe9ff7d87a0ff0cafbe9486c88bf84b667f490e647cbf20214286347f983fa706439ac986c54e81f23e7d49dc495c21dc219e74e7e0168b8526a95397554d10d08c8d1db9c8a8e8ddacf75969977def7ff27d475a9f2408ed2f83706f8051911eb007036d9e23ee1a0f16503527d04f4cfc4983646d73173ef5d643ff95153a1fce248dc6d9069d5670c594578bbb078808f784861838b5a6fd24252d715c443a1e89c2707f42949a69333064dae096118ed3bfb5c0fae855a11eea51d43cfdd6132333a2040ab71d0d82f8a10a786e8f5514d4bc6c3643afed9f6f92e52f3bd77ddc49e85d6da253642223be1c8ff9e636a9e8f05150899b22937663d4493113bc1494f9a6eac9e7740f7aae996b9166ed75f9ae6aeecf5c8b69ac672bdb4b36ead651610c80dc9842e9712cda4ef2bd54365e7dbe714160bc5d6834533ffbcd44ddf7d31f5ae05dde101ee8a7024916d4c060f062cd17be5cceed905c9437f2304c5893ba68cbfb9204f657ea4f5b3e0ebbc992e650a3ca639b2cd9e5af9b2744393b8211d8022be4fd474b7020c172c9e505a704f921c39f08139c906013e8cbd54e501f9e90c22720ab3f2e1826b6c702768cfed2e136d091a8e100f5e9b0523ac338cf5ad0f9d5edc2135c1d7c739224c5b99ecb5713285ffa66b9540213dd191d35168662cf0cb489187b9b85a2699d3154298d65afc8a0e9da2d68eb2072f57ae57a5dd48265ea18311cf0fe392231583da1abffe285630fc8542791bb593f08e46ede9daf55aa7ba54e8360197aed2d80c0d4b4283b0fc021ea4cb3c453904428b7b6e08d9c9fc055d17d034df96eccc5cc97a6e91b1e762e59fbc13216514701ef6f7cd553e3967888a8fab73b3fb1d452db890e82c7838f9791559fd9d7418ee16842e148ad777535078bbcc5b9211b989d5d29d437959d9881f14dffe69ece4fecd7cdbaf972ab1980df0566122fee75278cc045978f2c90bf37d6bdca7014afedecf14d21c6cfb25042e5fad59f31abe698c5d018ec5729973c4b9820ea9fc03c22c7d9bcb68521c0dc0b0a629f366ecc2d5ff432e1fb75c0d6a32b2b0db096bd27cee3f804c3bac37a7af432aa3be062b276a0503cec6e19c7125d55d35c4858c90d647d041941c2b7e7cf2dfc741ab28d8b4ec53c61d58a5adef5c4d58aed6327194a5fcdddb0e332e96d3c819579415103211303949e0290bf618e6773af967f1af896cd0f9aeb62afa80f00b2f0becb073e004bc253d3dee58e8ca0be542f73cbf7f3f35edd894faad53755000022c9ff3fb0e1cab430d5d09abd8c417678fa3c39f2203c9fe198c50e60d6009b66ab349ca789cf4051721052bea5ea5641231fc43bef7a7becfe4592865d566453b7508c79fbac7f4d77861f3558b10aae117cc318635d78ea0a05309ec7ef99e1ffc1cfec5847e535a9a7e059b3bed4fe8e557f9f7110149b769da6a2b70c8378f3f8608cda04b8a474ccb4b76a7a95b05c876363639909eb8d5936220f72289f6cf16c5ee4bd6e43d59500ec6313fb7c829a40d7deb7fd5a2cc37b2618fe185213f0b93439fb459c03a5dee822fbf34dc4b6ee39451f859c3cb3f1bacc081eaf78047d085f21372ba6bceeb0f46f908e6d20b1baa59a45b4ec59d2bb0d60920958afdbb815ddaa914ea33b19600db7e1b0659eff05b247b87ece3e668259d81c62165aaf217a386014ae175661c56f183cfe17321f11773b08ae4f0393f8c5e04fa5e648cb860cd18bd81dd3143ebea734fffd03ef30b40b093d3f4051f04e68d7e5b458b5fbdf693809eccf6c16db70aeb9ba419872c7c53a10ba0f4728e661bed3ed0fcb02cf4b71336716b666f96f69401a275c8c55fa8a6fa254e816602d762ca050ba8c314636267921c2cfae4a6745ad23e3067e4a4fe0f79f22d1df29dc76cc21d35378d3fe58ee89d7afbc4021f6e8bef7f4bfbf17f7d88923025da5c465062a26b3394cae9908c4161560e8bcdd828222a0e4ee1276eaeb250f211e19bce5ed1b7a24a092e21ea846fac4b922a20fa995c6c1dd7abcdfbcafd94e08e4d179a194a4b4d878e05da5da32ef58375aac27bfbb659b0fbcbe170852843a207bff63f573e55520963bf0c1e82839ab4698d9a6a9105b7c600f72d4156187a674b0decea46189dba4facc81c86949a411d8d49554dd772f4769c2d0077d86a44a614311d8c339d68ccf60fa9e690980820fdc8947efce9103bac56c1abab1bff5ba15d3dbd9cc81a9a4fa05f2c472aa394404ae33773b4c67c441105cb0ad0c3631066ac93b28f22f3aaa5ef7d06d7e5b163e31e7eeee71a4fba6955a28af388282c3c3b098348ccbaf4303b8b2ba2d28c86ac4309ec7a6e5bc18363fb5cdd9293b664090e4ba8312634dfe208ba4b85993c3a519d551630e0836a65e4dd7a9dcd649a4db63c58359a401b7a22712bfd20bbfc11941f18b699a29aef9e1685cb5630b49f7e60c57fe6cb28799e0f25bd235a4fd3b27d2aff352485053f180e987ffaeb7513a5efeb77a707f8bf611ed4573b690165ddf571a0a7d255ae5cb5ffec0f94eceb4f126469dcb88401fba85bc7d80558813cbe8258f6258c07eb8ae66cadb6396197aa7aed7cf032bc2eeb1bdf9a94687e7e30ac1e9f6eb535a9c585e92f9008d9cb04438373058eccc5f67c678ca78318f7639ac3f82d345598f416c6be24001326022d9bbb10d8eca91f053a9de4f18ab22a32e20985964e528e6cd7983f6f576d5ed20067fe7e4891c12874c1f6dbfda339a7bb2861fdd49671b857b67161eecd4aa5297e0e6639e6ece929ace3d639b7abd5be3c7041547ec77c5fd3172fa66f08a942eb13e0fe19e45df3785ac2de5f98341e991c1a8b8f9ae41bf511f22dbbab4cd9b9842140d1423f8309474792eb51ade73294ace94dae366e7075a45eed5c0b4c0e4af15b21c260b2680b5b469c3ade45ea61e0d7b4035841f72f33bde34622315514b81f92aff4740718473f196dbb721ace464b36863619bc74ea710c388048d6abe549cffad3033274ddd05cbf7aefb0838d57271aac80a8aa33b6b6502080c39203c4ed9115149f4292fd0c463dc9e28ccc73f8a87ab687dba29e52ccb4829258b1dd690622ad127b66e30c33db26117db98929653448db6e9a8e7cc62d526107def4bc8c331c3ad4e050c5e79a5f82d3b0e13d7f050555d7fd59728466c9fe77fb6cf75144030c16211c20cd647ac64f0f3dcbac78145781590e7690be68ee7b24d4c71534205656af4743ec8bd0442f790ecb6f0fa41d470d73eb20fbee02bcb72e153adee25a8219c377a3f5ade6ede917d0fd1891770779bc1c1c21a97e540feffd6126b291dae1b0e8d27b46c66a43d01e2b1fef5f8c2bfd1f04d5527a138db76a0aed6172cddab8768dd9382b2c5a31ffcfe6e2982f601cf2b12957a8348588ff82e27486012b607538b926b65f99ff5fd40dc2cac8b43aa77723baba1538eb6f0478155ae04a10defeeb53e1479e5b92eeef424d2b5531e75fb75e2b903a8f8f95dcc0e05e7781e2179a257f956d77e8c342e1304af81652e37345705bc05a0032a9a2fa5752af83a566604f84b65dfb5428dc326b6d8e7af2cdcc694497a0fee4113a1b237f0c482e4bd6caec4fcb568f6cfa91b8357c91f90609eeba596feba498ac87f380c51fc0ef285e440135e5918aa2098a3878dc10f6d0c1c7dbf30c3ee090ec39d5d954402abac598ef8f8ad17d2bc483f89d6c35ac24daf7bb15125dbe1936a72f174eccfc17e726fccb6590795de7272cc80471d9d7831c877bf450724eedf375fc57d0f713c9890c398c57c4e9a3c9cf0eb6977a1e3b7e6f3c9f544814eb0207cd9862e94e8900606f71952e248a356156595f47b20fc6816e5675f221b71afba1f1523f67d1b8f7619a2c16856b14153de212986dc7835a4b190de7d233d347f45c90bd55c23ccfc8f28af9317eace5a57c382808b8f1622f542e014b57994e79b25628ef4a12ddb116332cfc98b5b1fbc27580bceea9d10c47999ba7cf72190b542c4898dd9fab86def0b9ee74855cf349868add9049b10887299496c82aa65936308bbd2fd105a7af7443382245385c6a02b91925ea7db694bf01c37273db3c89e815f05443f6768421f1db60441b1a383aaafed4ae4511f63482d3eff0fa946c0a2fb0c56c3458691cf1e95667af8208798a7567c96909aaa30a66b4858ab7d121de30788f4e8d67bf43a7a106ff26d27db5635206b7da7a5ef690f264edd7e4228762ee59f8812e3d589a412737fe631aa9e7ac5731f6e48ca0ac8686849a669b394ebd6182ba2f16d0a2aae81def7b804b677b0b182edd6a904421c8cdc494579c1940575cf51e43604e76bcdb35c979b4447f74925d56e2f40d5b104794036c9b00424c11c9df9a8adbe2b7986bfec761b8e49de9abc988a3a435d734d0a8bfe6da5246a7bc6cb005c6f235b9215c040cf501b781f48bb0be6e6b9141708ab5e973f575a5c43601b9938bb7f06d258ff1f4aaadb3e22b1cce89dee1093adb1762f942e5d42aa380e69c6e2869c6a562dae188a15f308749bdee232c3103d23334400e5758e3db17cedeeabd22e6ed8d56a93833a460db25d88a4ec01e4de3ce85ac8a5ed21d6ae3bcedc81f2cf259be0a0a8f65c5fce1a07c468db7139fcf5a3e6360b890ce4eb966447655953b21e0b974bd2c9e120e773bbbb4b2b5a64264ced477db6a89b3fb9f2a79832f1713ec199bdfd1b5b37b00652769626ecc87f8e1860d76d63c796d685f21704e29a6abca5283ac972ad7b77cbebf2abbe4fcac2d33f5b466ec36b2ca12512b7ca118d0b8afdbb475fbda6e0b5d6040af7b7774e34707df789827b8bd57141d9d13f60b62d81dd671fd6dd1a97915a4c344897e28df94463492e2d50b430f2be442b165e4f342f3ee5b543817aec70481aff7311ffab28e48feb4da81d0235b88ab068b4c5a3a7c1dfda2dceb4142b5f9acdf037daafd2eba2882ccf138ce69da46888ebd5a5acf60c851fdc79ceeb2a3990c797ecf66b3be3f09d399c2ae3d492c0949dfa63cd9b23b7159102ada010d666d002132040baa05d1521edcb2b3d9981407c820db3fa5e4e8ba9c819f676b0339ab4ef7e5d852e3e0c39ab64e9160c1e731e08ded4f6dbac92a19fee5b60ab4c4effa87b41656b641a85a27a6cd1a37754813983f0de33456d6f6ebeb1ee01108a4ea08f738b9843f3abc720a3b7668f52bc962bbaa3ccf7b2bc608775bb1a070810bb5243f904187e8ad9c30ae00b21bfb371d7d8df1fe1b8689411a33fc9cf2a8304749eaa04", 0x1000}, {&(0x7f0000003400)="f19d47025eda3f42621b24482d4bf6348fd7164dc1360f00f41dfe04043ff5c70770943232f3cd0f81858a100d5455146c029d7a4b56deb87f0402efa1459388a25c5587958fbd76af760c5e44578c7b1bcfedf312b6f3d99ddfd95cd9d5330280ad7fcf7faf3c3b95965a86c752ba9dc6dacd0f1cd56a9b4527fbd5d10c895a85490bc69c4c133b5ce5dbbc534846d0a187d6221302c15a541467e0dbc742", 0x9f}, {&(0x7f00000034c0)="47ae12c9", 0x4}, {&(0x7f0000003500)="7a45228653d8d541eda6c636c9c341c8b73a997a72fe5f1707f0a2603fd1230c9dabcec2484a46215e468f80e61d6b1d6d991d6b63cd37ae778b585684c4ad39f51bb6a680904a75cc6fc9", 0x4b}], 0x4, &(0x7f00000035c0)=[{0x68, 0x111, 0x51, "dbb481bfbbfe68ab916b76f6a73fbad52973b3df12adcaa8d6cca5d0b0e78c21ec3c82d1851ddbe15a8d5861bcc97acad55a09c5e8d33e3ba50a455fc1e1a661b42eedaf42e8a4e4c70e7412a46f8609a1bd22d75b9b"}, {0x90, 0x11, 0x0, "6ab97c45a0b83606a3e816ac0c199c6fe616ea6882fd0ff422ce29ad787177a4c14040f21e085af1e903287073455664e30032c821beadf182e3fb855c69e3a79fbbbd22af8a97f05944a489151e15e3cc6b068b35e5809b75c6a16c2b3f487746454f7bb298e8061bc7790e7da0d6faf4c0a26922d90ccf82f5aa"}, {0x78, 0x101, 0x9, "75c9fd046c2509d737a5a4836d297a5b871ac10632c4e29e134084571d15e3ab508b0ffa7c183e95ca7fdba57b44f54b54425c56588b19ae0ece0d92bf9f6d83dfa47d6437531b8bcbef9532a88fc5cb8a36596c34516342c8ea397d4631e1a408b5f7"}], 0x170}}], 0x3, 0x40000) r8 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) r9 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) r10 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r10, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$FITRIM(r10, 0xc0185879, &(0x7f0000003840)={0x2, 0x1, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000003940)=[{&(0x7f0000003980)=""/119, 0x77}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000280)) write$FUSE_NOTIFY_DELETE(r8, &(0x7f0000003800)={0x37, 0x6, 0x0, {0x3, 0x0, 0xe, 0x0, 'veth0_to_team\x00'}}, 0x37) 11:49:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e960adfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:18 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x600382, 0x82) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000440)=0x2, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000380)="44824d2d63dceab9aea1ec9b80cf6179126a54ef74869dd9e2085b03acf7b46515591bfc225852a92431c79681e88a4c375e952cc2bb8e0e675f005f4f7e9de32a4c0992e03a734535ea608c2d0b20be44c5e8d6f7fb0b9405d3917a21d83522088484c2507c0d1327845b723dfa806f5654f1318c46543446977d65735967a72bd519404c6ece4f14f356ffa6a579a422144c4ef2a2b6a26518a8b774941edb5262eac61cdd73149342ed03ad62cd967d9ec544b905226c", 0xffffffffffffff2a) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x163840, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000480)=ANY=[@ANYBLOB="06000000000000000700000000000000020000000104000009000000000000000000000000000000020000e500000000ff01000000000000000000000000000000000000000000000a2800000000000000000000000000000500000000000000000000000000200008000000000000000000000000000000000000000000000004000000000000000000000000000000ff03000400000000060000000000000002000000000000000000000000000000000000000000000084000000000000000000000000000000010001000000000000010000000000000300cef600000000000000000000000000000000000000000000000000000000000000000000000008000000000000000900000000000000453e0000000000000000000000000000000000000000000004040000000000000000000008886ba27b0e26686a1100000000080000000000000004020000000000000100000000000000000000000000000000000000000000000e00000000000000000000000000000081000000000000000600000000000000070000000000000000000000000000000000000000000000041000000000000000000000000000000300000000000000000000000000000086fdf82d0000000000000000000000000000000000000000841100000000000000000000000000001716000000000000ff0f000000000000ff0300000000000000000000000000000000000000000000000200"/546]) 11:49:18 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x2600000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:49:18 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1397.783989][T32095] attempt to access beyond end of device 11:49:19 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x9a00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1397.831526][T32095] loop3: rw=4096, want=21, limit=2 [ 1397.895489][T32095] XFS (loop3): SB validate failed with error -5. 11:49:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9610dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:19 executing program 4: r0 = socket(0x10, 0x802, 0x0) connect$netlink(r0, &(0x7f0000000640), 0xc) sendmsg$nl_route_sched(r0, &(0x7f00000032c0)={&(0x7f0000000240), 0xc, &(0x7f0000003280)={&(0x7f0000001b00)=@newtaction={0x34, 0x31, 0x219, 0x0, 0x0, {}, [{0x20}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x7}, 0x10) bind$inet(r1, &(0x7f00000005c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a320000000009000200738f7a31000000000500010007000000531157d5bcc2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b85467126687d0dd51e9ea171099aea182548af0b30ff58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ef2f84bf33c25283dc5fc31062818fa34691eb778701"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x4800, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x48, 0x0, {0x0, 0x0, 0x3f00}, [@IFLA_OPERSTATE={0x8, 0xa, 0x10}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0xf0}, 0x0) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42800) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="c7ac5be2b5564aacba7392c867d59bff8619617cc1190d248ab9b446d4b5f21a866a13444a95137139791e9a39875f4b07c3379d64cf0d7db2e70960e33d78491d6a4682177b25663d2a1749922cfa09154f8e6283c9af6b4ecc2e0f35b60ed1c121ff87129734c0f0d73fef0c005a0bf904529846134b43733e9e384d43deb4742fabd27710ba64aa800ed591a095e5ae99f4359662dfdcb8bf2bc072727cde94d94ee69235da433bfafc2f719f46cd73104560b565533a74e4bf9f9f8d63834085de89c268ef9ab68bd60559df486e7d3fd33201a2fa812cedbb016ef4ae6efdc77d1a33d7fa42f169edd1550be3eb9105fbcd145929", @ANYBLOB="bace01ac38a0eecf7c7d6bea42bfbeb8205de985ccaa985830ea8c3ac7acd6269a9a97dbc1a90f5df04a", @ANYPTR64=&(0x7f0000000600)=ANY=[@ANYRESDEC=r3], @ANYRES64=r0], @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b89aab49ad30a704aa4f574f493a554bd08b3abf111160c5ee6746a0e9a03b182760e556f17156f9573e220fca1bb372eea61fbb4a67b003702e307c1651bbcb8c09d5de2a33ac580443bdc788b1f00f9a3155816be58d23eb1733453372067f9ab361101b5271c4c24642ba2bf25dd22514b92ed55e28140c751b8d4d2a22b00"], 0x3}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04002bbd7000fcdbdf250100000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x10, r9, 0x0) r10 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r11 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x1000000, 'lblcr\x00'}, 0x2c) r12 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000001600)={0x0, @remote, @empty}, &(0x7f0000000100)=0xfffffe78) ioctl$sock_inet_SIOCGIFPFLAGS(r11, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f0000000140)={r13, @remote, @loopback}, 0xc) ioctl$FICLONE(r9, 0x40049409, r10) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000480)={'team0\x00', r13}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x3, r13, 0x1, 0x4, 0x6, @remote}, 0x14) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r1, &(0x7f0000000040)='D', 0x1a000) 11:49:19 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xcc01000000000000, 0x0, 0x0, 0x0) [ 1398.207546][T32119] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1398.290755][T32119] team0: Device ipvlan1 failed to register rx_handler [ 1398.463656][T32128] attempt to access beyond end of device [ 1398.469433][T32128] loop3: rw=4096, want=21, limit=2 [ 1398.477882][T32128] XFS (loop3): SB validate failed with error -5. [ 1398.642478][T32123] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 11:49:19 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9614dfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1398.689249][T32133] team0: Device ipvlan1 failed to register rx_handler 11:49:20 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x2602000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:49:20 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x9b00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:49:20 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000200)={0x9a0000, 0xc99714, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x8e, 0x101, [], @value=0x80000001}}) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x18) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) [ 1399.085391][T32153] attempt to access beyond end of device [ 1399.117542][T32153] loop3: rw=4096, want=21, limit=2 11:49:20 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xdc02000000000000, 0x0, 0x0, 0x0) [ 1399.177834][T32153] XFS (loop3): SB validate failed with error -5. 11:49:20 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:20 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000200)="56902b19e6860cf4a2523e58671c5e9688c972f9c744", 0x16) 11:49:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e963ddfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:20 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r2 = dup2(r0, r1) recvfrom$inet(r2, &(0x7f0000000140)=""/26, 0x1a, 0x40000000, &(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:20 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000140)="49edc0ea200f2ee7786930958d4ecc3dba2d618beba4cef7b8c6f2235ac751dee12004f44665543f0a471384056a7d4c708ed2fb9d751d1d5014638393b3b968114ca99d6f95d6c10ec16df5b647c5568ced2a561ae9a8127d685bf2ff4af24c28df06ded12c9310dc36e485725216ddcb4454a3976cb6bde3f766e24bcde148", 0x80, 0x4004040, &(0x7f0000000200)={0x2, 0x0, @broadcast, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) dup2(0xffffffffffffffff, r1) write(r0, &(0x7f0000000040)='D', 0x1a000) [ 1399.731521][T32185] attempt to access beyond end of device [ 1399.739517][T32185] loop3: rw=4096, want=21, limit=2 [ 1399.754005][T32185] XFS (loop3): SB validate failed with error -5. 11:49:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e963edfa7941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:21 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x2603000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:49:21 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x5, 0x84, 0x101, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f0000000580), &(0x7f0000000480)}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:21 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x9c00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) [ 1400.144248][T32208] attempt to access beyond end of device [ 1400.185062][T32208] loop3: rw=4096, want=21, limit=2 [ 1400.253147][T32208] XFS (loop3): SB validate failed with error -5. 11:49:21 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xdc03000000000000, 0x0, 0x0, 0x0) 11:49:21 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x11}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:21 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x8000, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={r4, 0x7f}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={r4, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000180)=0x84) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa6941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:21 executing program 4: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000200)={0x8, "2675c75c110bdde2458298327535fb6d3ffd8923227490c4e70ff78ab116cf98", 0x6, 0x1}) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) r2 = accept(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000580)={'macvlan1\x00', 0x7, 0x18000}) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000240)=0x3, 0x4) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e24, @rand_addr=0x101}, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r1, &(0x7f0000000040)='D', 0x1a000) [ 1400.746055][T32243] attempt to access beyond end of device [ 1400.787726][T32243] loop3: rw=4096, want=21, limit=2 [ 1400.845392][T32243] XFS (loop3): SB validate failed with error -5. 11:49:22 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x9d00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:49:22 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x53, "fcc0bfa3da54ca4e841a8c24a5cbba11d1666307104dc61474548251fa70cd8e99a166ce87cbd89a1734eec96162dd8be3177ca4ef3c0eedfadf0b8f4d0c600af8cb1fc2bc789ea972b2f366910ba01828c2e1"}, &(0x7f0000000200)=0x77) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000580)={'filter\x00', 0x1000, "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"}, &(0x7f0000000240)=0x1024) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) getsockname$inet(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10) 11:49:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa8941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:22 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x3800000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:49:22 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f00000001c0)}}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x8, 0x1, 0xff81}, 0x8) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000180)) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:22 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xde03000000000000, 0x0, 0x0, 0x0) 11:49:22 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x13}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1401.445587][T32275] attempt to access beyond end of device [ 1401.453653][T32275] loop3: rw=4096, want=21, limit=2 [ 1401.468667][T32275] XFS (loop3): SB validate failed with error -5. 11:49:22 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)=0x60, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x4, 0x4, 0x2, {0xa, 0x4e23, 0x2, @rand_addr="31e5eca7118da467c99f8b929a24dc7a", 0x7}}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r2 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x8800) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x10, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800) 11:49:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfc0941ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:22 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:23 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x9e00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:49:23 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockname$unix(r1, &(0x7f0000000140)=@abs, &(0x7f0000000200)=0x6e) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) [ 1402.037630][T32304] attempt to access beyond end of device [ 1402.077961][T32304] loop3: rw=4096, want=21, limit=2 [ 1402.136434][T32304] XFS (loop3): SB validate failed with error -5. 11:49:23 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x14}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:23 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x3f00000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:49:23 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000180)={0x0, 0x6, 0xffffff00, r1, 0x0, &(0x7f0000000140)={0x980912, 0x50224d11, [], @value=0x100}}) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={r4, 0x7f}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={r4, 0x8}, &(0x7f0000000240)=0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7161ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:23 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xe401000000000000, 0x0, 0x0, 0x0) [ 1402.697194][T32340] attempt to access beyond end of device [ 1402.704248][T32340] loop3: rw=4096, want=21, limit=2 [ 1402.714124][T32340] XFS (loop3): SB validate failed with error -5. 11:49:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7181ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1403.021841][T32354] attempt to access beyond end of device [ 1403.027747][T32354] loop3: rw=4096, want=21, limit=2 [ 1403.057781][T32354] XFS (loop3): SB validate failed with error -5. 11:49:24 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x9f00, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:49:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7221ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:24 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x15}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:24 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r2 = getpid() ptrace$getregs(0xe, r2, 0x100, &(0x7f0000000580)=""/201) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x4) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:24 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xf201000000000000, 0x0, 0x0, 0x0) 11:49:24 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x4000000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) [ 1403.609819][T32381] attempt to access beyond end of device [ 1403.615693][T32381] loop3: rw=4096, want=21, limit=2 [ 1403.646266][T32381] XFS (loop3): SB validate failed with error -5. 11:49:25 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x4, {0xfffffc01}}, 0x18) r2 = socket$inet(0x2, 0x80001, 0x84) userfaultfd(0xcd39282521b50e49) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) write(r2, &(0x7f0000000040)='D', 0x1a000) 11:49:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa72a1ac971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:25 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0x1}], 0x1, 0x0, 0x9}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/110, 0x6e}], 0x1) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000340)=0x2) r3 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[]}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000003c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000400)=0x18) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000440)={r5, 0x0, 0x6, [0x8000, 0x80, 0x8a, 0x120, 0x2, 0x421]}, &(0x7f0000000480)=0x14) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000140)) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r6, 0xc0605345, &(0x7f00000002c0)={0x2, 0x2, {0x3, 0x2b9ab614c9bc955b, 0x6}, 0xfff}) 11:49:25 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) [ 1404.304076][T32408] attempt to access beyond end of device [ 1404.311668][T32408] loop3: rw=4096, want=21, limit=2 [ 1404.325857][T32408] XFS (loop3): SB validate failed with error -5. 11:49:25 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xa000, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:49:25 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7943dc971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:25 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e1e, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:25 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0x8c6, 0x6bc, 0x4000, 0x8}, 0x8) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={r3, 0x7f}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x8, 0x4, 0x200, 0x4, 0x80000000, 0x80, 0x400, 0x4, r3}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)={r4, 0x7fff, 0x1, [0x2db]}, &(0x7f0000000240)=0xa) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:26 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xf400000000000000, 0x0, 0x0, 0x0) [ 1404.788184][T32434] attempt to access beyond end of device [ 1404.795186][T32434] loop3: rw=4096, want=21, limit=2 [ 1404.817755][T32434] XFS (loop3): SB validate failed with error -5. 11:49:26 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x41fb0b9312010000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:49:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7943ec971e111dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1405.214479][T32460] attempt to access beyond end of device [ 1405.237166][T32460] loop3: rw=4096, want=21, limit=2 [ 1405.267753][T32460] XFS (loop3): SB validate failed with error -5. 11:49:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e114dfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:26 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xa100, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:49:26 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x14d}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1405.633605][T32476] attempt to access beyond end of device [ 1405.648085][T32476] loop3: rw=4096, want=21, limit=2 [ 1405.671559][T32476] XFS (loop3): SB validate failed with error -5. 11:49:27 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xf6ffffff00000000, 0x0, 0x0, 0x0) 11:49:27 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x1, 0x22000) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x1, 0x6, 0xc0, 0x1, 0x80, 0x1f, 0x3, 0x5, 0x4, 0x9, 0x89, 0x2, 0x1, 0x5b}, 0xe) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000200)={0x9, 0x0, [], {0x0, @bt={0x1, 0x0, 0x1, 0x0, 0x80000001, 0x7, 0x1ff, 0x400, 0x3, 0x8001, 0x2, 0x1, 0x508, 0x30bc, 0x16, 0x12, {0xfff, 0x933}, 0xe9, 0x20}}}) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e13ddfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1406.058243][T32501] attempt to access beyond end of device [ 1406.064266][T32501] loop3: rw=4096, want=21, limit=2 [ 1406.075751][T32501] XFS (loop3): SB validate failed with error -5. 11:49:27 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x4253465800000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:49:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e13edfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:27 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x10, r2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r5 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000000, 'lblcr\x00'}, 0x2c) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000300)={r6, @loopback, @remote}, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000001600)={0x0, @remote, @empty}, &(0x7f0000000100)=0xfffffe78) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={r8, @remote, @loopback}, 0xc) ioctl$FICLONE(r2, 0x40049409, r4) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000480)={'team0\x00', r8}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x404001}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x19b, r9, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0xbc}}, {{0x8, 0x1, r6}, {0x44}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000002c0)={r6, 0x1, 0x6}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r10 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r10, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32000041a8e6a7020073797a32000000000900020073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0370eaba8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r11, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x66, &(0x7f0000000040)={r12}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={r12, 0x7f}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r10, 0x84, 0x1a, &(0x7f0000000140)={r12, 0x4b, "476afab14da552a5acdb97e569e9cfff079fc468ec091653d02d04916c2ffcd56735e34955542564cf2777feaa7b00ff69e6bd81f645f1063f19e1bf38f872080d8a756931d38404d986ee"}, &(0x7f0000000200)=0x53) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r13, 0x4, 0x3}, &(0x7f0000000280)=0xc) 11:49:27 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xa200, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:49:27 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x29a}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1406.659365][T32528] attempt to access beyond end of device [ 1406.665179][T32528] loop3: rw=4096, want=21, limit=2 [ 1406.670551][T32528] XFS (loop3): SB validate failed with error -5. 11:49:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e15ddfb85d330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:28 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xf803000000000000, 0x0, 0x0, 0x0) 11:49:28 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1407.197750][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1407.203571][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1407.229708][T32552] attempt to access beyond end of device [ 1407.235517][T32552] loop3: rw=4096, want=21, limit=2 [ 1407.295770][T32552] XFS (loop3): SB validate failed with error -5. 11:49:28 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x4800000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:49:28 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000200)={0x11, "511998c01e6d2778dc85153ff6c000a95c1bb4e47b799b79427fbc5aa4f66e9dd0aa3d4c59331793fbec7ada6c8d94232125d8cb08968825e9332ab5969fe36b379d421378b74271ee479031564a81222a965973c8ef27ecea64962272a0ec49d161aa426083e280656ecfc34657ae013c8cdb915aa221b4a90c70b838b57fb7"}) 11:49:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb80a330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:29 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xa300, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:49:29 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0xffffffffffffff5d) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:29 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xf9fdffff00000000, 0x0, 0x0, 0x0) [ 1408.016360][T32579] attempt to access beyond end of device [ 1408.029980][T32579] loop3: rw=4096, want=21, limit=2 [ 1408.053104][T32579] XFS (loop3): SB validate failed with error -5. 11:49:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb825330672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:29 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e23, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) 11:49:29 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x41a}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1408.583012][T32604] attempt to access beyond end of device [ 1408.607724][T32604] loop3: rw=4096, want=21, limit=2 [ 1408.654209][T32604] XFS (loop3): SB validate failed with error -5. 11:49:29 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x4a00000000000000, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x0, 0xad71931822b0e350, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe58}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) 11:49:29 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000180)={0x1, 0xf, "c121af46dfb13eb8df992ff42e8858"}) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000200)=0x4, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f0000000140)={0x0, {0xffff, 0xffffff80}}) socket$inet6_sctp(0xa, 0x5, 0x84) 11:49:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d090672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:30 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "2f4e5fd817b93853", "43e02f20d6537abd439fdaa1794596dcd5e0873381ceba1d92f6d6a575081754", "8598652b", "6f66393cf504a09e"}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x500}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 11:49:30 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xfa03000000000000, 0x0, 0x0, 0x0) 11:49:30 executing program 1: syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xa400, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x0, 0x0) 11:49:30 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x20}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x151001, 0x101) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x5, 0x404000) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x201, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, 0x2, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x8000000) [ 1409.175434][T32636] attempt to access beyond end of device [ 1409.188068][T32636] loop3: rw=4096, want=21, limit=2 [ 1409.206623][T32636] XFS (loop3): SB validate failed with error -5. 11:49:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d0a0672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) 11:49:30 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200101, 0x10) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x8}) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) socketpair(0x4, 0x6, 0xfb, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x9, 0x240001) poll(&(0x7f00000003c0)=[{r4, 0x4a0}, {r3, 0x498}, {r1, 0x1205}], 0x3, 0xc19) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000240)="09afcc0d22a4826642ab62bc0bef42cea441995006768a7e0cefc4037c34a034dc49d3bda803379e6a93d6ef724a94d8462fed366bfa490f837577300559d1b087f28f4e6005cecb0d44ba50583bfa34391383e4a92202de2c6c8a844b27bd4370930bf914f06e5001937b28dc47aaf2a6e6dc90d8580fe719143c568c48ead7a70b32b0d5ee5d6c5787deda74fadeb98f16b162c600388bc58ad2b2e573fcbf3abb478dcef4a3883e7a5d1810f01e8baf390e58a222004b70343816f50d73f376f1e1d8b21d206351138c82f1cfe26f30cb0ae578efd85c30ffcd9087f51ba6d8484f47c7033cc638a0aa5dcdbdf26a34bd", 0xf2}], 0x1) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) write(r0, &(0x7f0000000040)='D', 0x1a000) [ 1409.571745][T32661] attempt to access beyond end of device [ 1409.578771][T32661] loop3: rw=4096, want=21, limit=2 [ 1409.636483][T32661] XFS (loop3): SB validate failed with error -5. [ 1409.788592][T32634] ================================================================== [ 1409.796764][T32634] BUG: KCSAN: data-race in file_remove_privs / new_sync_write [ 1409.804214][T32634] [ 1409.806552][T32634] write to 0xffff88811f6ffccc of 4 bytes by task 32639 on cpu 1: [ 1409.814279][T32634] file_remove_privs+0x1cf/0x2b0 [ 1409.819233][T32634] __generic_file_write_iter+0xd2/0x380 [ 1409.824815][T32634] generic_file_write_iter+0x28c/0x38c [ 1409.830282][T32634] new_sync_write+0x388/0x4a0 11:49:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x48d, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="584653423369ab09921183bd6b0189028efa172046762e9607dfa7941ac971e111dfb85d2f0672c8406535d84dc9161f9cfa3d7375ef51e5546500800000922c6b61558b3bcc2d3032c4db9fc499436c4d4239936e94f6979ef2bc173d6f6a2ae9eaadbe0bad28eea70154b5e10792474f2ffa856ef568a4e3e76ad49d315e874d3417e5a76098538b0300000000000000bdde278f0339729018c657c4c87103b517aaca30b7c2d36f3e258cc6d97ea7d6a9", 0xb2}], 0x0, 0x0) [ 1409.834973][T32634] __vfs_write+0xb1/0xc0 [ 1409.839228][T32634] vfs_write+0x18a/0x390 [ 1409.843481][T32634] ksys_pwrite64+0xee/0x120 [ 1409.847997][T32634] __x64_sys_pwrite64+0x5e/0x80 [ 1409.852889][T32634] do_syscall_64+0xcc/0x3a0 [ 1409.857414][T32634] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1409.863321][T32634] [ 1409.865664][T32634] read to 0xffff88811f6ffccc of 4 bytes by task 32634 on cpu 0: [ 1409.873536][T32634] new_sync_write+0x457/0x4a0 [ 1409.878225][T32634] __vfs_write+0xb1/0xc0 [ 1409.882510][T32634] vfs_write+0x18a/0x390 [ 1409.886764][T32634] ksys_pwrite64+0xee/0x120 [ 1409.891276][T32634] __x64_sys_pwrite64+0x5e/0x80 [ 1409.896254][T32634] do_syscall_64+0xcc/0x3a0 [ 1409.900793][T32634] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1409.906683][T32634] [ 1409.909010][T32634] Reported by Kernel Concurrency Sanitizer on: [ 1409.915177][T32634] CPU: 0 PID: 32634 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1409.923847][T32634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1409.934034][T32634] ================================================================== [ 1409.942102][T32634] Kernel panic - not syncing: panic_on_warn set ... [ 1409.948897][T32634] CPU: 0 PID: 32634 Comm: syz-executor.2 Not tainted 5.5.0-rc1-syzkaller #0 [ 1409.957573][T32634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1409.969974][T32634] Call Trace: [ 1409.973273][T32634] dump_stack+0x11d/0x181 [ 1409.977622][T32634] panic+0x210/0x640 [ 1409.981543][T32634] ? vprintk_func+0x8d/0x140 [ 1409.986151][T32634] kcsan_report.cold+0xc/0xd [ 1409.990771][T32634] kcsan_setup_watchpoint+0x3fe/0x460 [ 1409.996154][T32634] __tsan_read4+0xc6/0x100 [ 1410.000596][T32634] new_sync_write+0x457/0x4a0 [ 1410.005982][T32634] ? apparmor_file_permission+0x38/0x50 [ 1410.011537][T32634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1410.017794][T32634] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1410.023710][T32634] __vfs_write+0xb1/0xc0 [ 1410.028064][T32634] vfs_write+0x18a/0x390 [ 1410.032410][T32634] ksys_pwrite64+0xee/0x120 [ 1410.036928][T32634] __x64_sys_pwrite64+0x5e/0x80 [ 1410.041798][T32634] do_syscall_64+0xcc/0x3a0 [ 1410.046314][T32634] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1410.052204][T32634] RIP: 0033:0x415147 [ 1410.056105][T32634] Code: 12 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a1 18 00 00 c3 48 83 ec 08 e8 a7 f9 ff ff 48 89 04 24 49 89 ca b8 12 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 ed f9 ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1410.075711][T32634] RSP: 002b:00007feed6c36a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1410.084142][T32634] RAX: ffffffffffffffda RBX: 00007feed6c376d4 RCX: 0000000000415147 [ 1410.092133][T32634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1410.100134][T32634] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 0000000000000000 [ 1410.108108][T32634] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000ffffffff [ 1410.116095][T32634] R13: 0000000000000ba7 R14: 00000000004cc865 R15: 000000000075bf2c [ 1410.125752][T32634] Kernel Offset: disabled [ 1410.130088][T32634] Rebooting in 86400 seconds..