_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) keyctl$search(0xa, r5, &(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, r6) add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) 23:44:03 executing program 5: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7fffffffffffffff, 0x10000) fanotify_mark(0xffffffffffffffff, 0x24, 0x40001021, r1, &(0x7f00000001c0)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dvmrp0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040090) geteuid() 23:44:03 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) keyctl$unlink(0x9, r5, 0x0) 23:44:03 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) keyctl$search(0xa, r5, &(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, r6) add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) 23:44:03 executing program 4: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) socket$nl_generic(0x10, 0x3, 0x10) getuid() 23:44:03 executing program 0: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7fffffffffffffff, 0x10000) fanotify_mark(0xffffffffffffffff, 0x24, 0x40001021, r1, &(0x7f00000001c0)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dvmrp0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040090) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) write$P9_RLOCK(r3, &(0x7f00000004c0)={0x8, 0x35, 0x2, 0x1}, 0x8) socketpair(0x3, 0x6, 0xff, &(0x7f0000000500)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r5, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 23:44:03 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0x9, r5, 0x0) 23:44:03 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) keyctl$search(0xa, r5, &(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, r6) 23:44:03 executing program 4: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) getuid() 23:44:03 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) keyctl$search(0xa, r5, &(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, r6) 23:44:03 executing program 5: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7fffffffffffffff, 0x10000) fanotify_mark(0xffffffffffffffff, 0x24, 0x40001021, r1, &(0x7f00000001c0)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dvmrp0\x00'}) geteuid() 23:44:03 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0x9, r5, 0x0) 23:44:03 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) 23:44:03 executing program 0: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7fffffffffffffff, 0x10000) fanotify_mark(0xffffffffffffffff, 0x24, 0x40001021, r1, &(0x7f00000001c0)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dvmrp0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040090) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) write$P9_RLOCK(r3, &(0x7f00000004c0)={0x8, 0x35, 0x2, 0x1}, 0x8) socketpair(0x3, 0x6, 0xff, &(0x7f0000000500)) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) 23:44:03 executing program 4: getuid() 23:44:03 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) 23:44:03 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) keyctl$unlink(0x9, 0x0, 0x0) 23:44:03 executing program 5: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7fffffffffffffff, 0x10000) fanotify_mark(0xffffffffffffffff, 0x24, 0x40001021, r1, &(0x7f00000001c0)='./file0\x00') geteuid() 23:44:03 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) keyctl$negate(0xd, 0x0, 0x1, r0) 23:44:03 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0x9, r5, 0x0) 23:44:03 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) 23:44:03 executing program 0: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7fffffffffffffff, 0x10000) fanotify_mark(0xffffffffffffffff, 0x24, 0x40001021, r1, &(0x7f00000001c0)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dvmrp0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040090) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) write$P9_RLOCK(r3, &(0x7f00000004c0)={0x8, 0x35, 0x2, 0x1}, 0x8) socketpair(0x3, 0x6, 0xff, &(0x7f0000000500)) 23:44:03 executing program 5: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x10) syz_open_dev$vcsn(&(0x7f0000000180), 0x7fffffffffffffff, 0x10000) geteuid() 23:44:03 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r3, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$unlink(0x9, 0x0, 0x0) 23:44:03 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) keyctl$unlink(0x9, 0x0, 0x0) 23:44:03 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) 23:44:03 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$negate(0xd, 0x0, 0x1, r0) 23:44:03 executing program 5: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x10) geteuid() 23:44:03 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r1) keyctl$unlink(0x9, 0x0, 0x0) 23:44:03 executing program 0: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7fffffffffffffff, 0x10000) fanotify_mark(0xffffffffffffffff, 0x24, 0x40001021, r1, &(0x7f00000001c0)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dvmrp0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040090) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) write$P9_RLOCK(r3, &(0x7f00000004c0)={0x8, 0x35, 0x2, 0x1}, 0x8) 23:44:03 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$negate(0xd, 0x0, 0x1, r0) 23:44:03 executing program 5: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) socket$nl_generic(0x10, 0x3, 0x10) geteuid() 23:44:03 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:03 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) 23:44:03 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)) keyctl$unlink(0x9, 0x0, 0x0) 23:44:04 executing program 5: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) geteuid() 23:44:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) keyctl$negate(0xd, 0x0, 0x1, r0) 23:44:04 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) keyctl$search(0xa, r5, &(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, r6) 23:44:04 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:04 executing program 0: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7fffffffffffffff, 0x10000) fanotify_mark(0xffffffffffffffff, 0x24, 0x40001021, r1, &(0x7f00000001c0)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dvmrp0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040090) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) pipe2$9p(&(0x7f0000000480), 0x4880) 23:44:04 executing program 5: geteuid() 23:44:04 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) keyctl$unlink(0x9, 0x0, 0x0) 23:44:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r3, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$negate(0xd, 0x0, 0x1, r0) 23:44:04 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:04 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:04 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:04 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, 0x0, 0x0) 23:44:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r1) keyctl$negate(0xd, 0x0, 0x1, r0) 23:44:04 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:04 executing program 0: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7fffffffffffffff, 0x10000) fanotify_mark(0xffffffffffffffff, 0x24, 0x40001021, r1, &(0x7f00000001c0)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dvmrp0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040090) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 23:44:04 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100), 0x80) keyctl$unlink(0x9, 0x0, 0x0) 23:44:04 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r3, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$negate(0xd, 0x0, 0x1, r0) 23:44:04 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r5) 23:44:04 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)) keyctl$negate(0xd, 0x0, 0x1, r0) 23:44:04 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:04 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) keyctl$unlink(0x9, 0x0, 0x0) 23:44:04 executing program 0: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7fffffffffffffff, 0x10000) fanotify_mark(0xffffffffffffffff, 0x24, 0x40001021, r1, &(0x7f00000001c0)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dvmrp0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040090) 23:44:04 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) keyctl$search(0xa, 0x0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:04 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r5) 23:44:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) keyctl$negate(0xd, 0x0, 0x1, r0) 23:44:04 executing program 0: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7fffffffffffffff, 0x10000) fanotify_mark(0xffffffffffffffff, 0x24, 0x40001021, r1, &(0x7f00000001c0)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dvmrp0\x00'}) 23:44:04 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$unlink(0x9, 0x0, 0x0) 23:44:04 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r5) 23:44:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$negate(0xd, 0x0, 0x1, r0) 23:44:04 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) keyctl$search(0xa, 0x0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:04 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, 0x0, 0x0) 23:44:04 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r5) 23:44:04 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100), 0x80) keyctl$unlink(0x9, 0x0, 0x0) 23:44:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100), 0x80) keyctl$negate(0xd, 0x0, 0x1, r0) 23:44:04 executing program 1: keyctl$unlink(0x9, 0x0, 0x0) 23:44:04 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) keyctl$search(0xa, 0x0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:04 executing program 0: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7fffffffffffffff, 0x10000) fanotify_mark(0xffffffffffffffff, 0x24, 0x40001021, r1, &(0x7f00000001c0)='./file0\x00') 23:44:04 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r3, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r5 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r4, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r5) 23:44:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) keyctl$negate(0xd, 0x0, 0x1, r0) 23:44:04 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:04 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r3, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r4, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$negate(0xd, 0x0, 0x1, r0) 23:44:04 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:04 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r1) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r3 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r2, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r3) 23:44:04 executing program 0: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x10) fanotify_mark(0xffffffffffffffff, 0x24, 0x40001021, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') 23:44:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, 0x0, 0x1, r0) 23:44:04 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) keyctl$unlink(0x9, r5, 0x0) 23:44:04 executing program 1: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7fffffffffffffff, 0x10000) fanotify_mark(0xffffffffffffffff, 0x24, 0x40001021, r1, &(0x7f00000001c0)='./file0\x00') getuid() 23:44:04 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r1) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r2, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:04 executing program 3: keyctl$negate(0xd, 0x0, 0x1, 0x0) 23:44:04 executing program 0: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) socket$nl_generic(0x10, 0x3, 0x10) fanotify_mark(0xffffffffffffffff, 0x24, 0x40001021, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') 23:44:04 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r3 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r2, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r3) 23:44:04 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r1) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r3 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r2, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r3) 23:44:04 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) keyctl$search(0xa, r5, &(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, r6) r8 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r5, r8) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0, r5) 23:44:04 executing program 3: keyctl$negate(0xd, 0x0, 0x0, 0x0) 23:44:04 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r2, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:04 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r3 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r2, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r3) 23:44:04 executing program 0: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) fanotify_mark(0xffffffffffffffff, 0x24, 0x40001021, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') 23:44:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) keyctl$search(0xa, r5, &(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, r6) keyctl$unlink(0x9, r5, 0x0) 23:44:04 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) keyctl$search(0xa, r5, &(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, r6) r8 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r5, r8) 23:44:04 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) keyctl$search(0xa, r5, &(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, r6) r8 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r5, r8) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0, r5) 23:44:04 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r2, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:04 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r3 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r2, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r3) 23:44:04 executing program 0: fanotify_mark(0xffffffffffffffff, 0x24, 0x40001021, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') 23:44:05 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r2, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:05 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r2, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:05 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100), 0x80) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:05 executing program 4: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7fffffffffffffff, 0x10000) fanotify_mark(0xffffffffffffffff, 0x24, 0x40001021, r1, &(0x7f00000001c0)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dvmrp0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040090) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) getuid() 23:44:05 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) keyctl$search(0xa, r5, &(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, r6) r8 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r5, r8) r9 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$search(0xa, r9, &(0x7f0000000700)='trusted\x00', &(0x7f0000000740)={'syz', 0x3}, 0xfffffffffffffffb) 23:44:05 executing program 0: fanotify_mark(0xffffffffffffffff, 0x0, 0x40001021, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') 23:44:05 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:05 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100), 0x80) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:05 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) keyctl$search(0xa, r5, &(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, r6) r8 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r5, r8) r9 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$search(0xa, r9, &(0x7f0000000700)='trusted\x00', &(0x7f0000000740)={'syz', 0x3}, 0xfffffffffffffffb) 23:44:05 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) keyctl$search(0xa, r5, &(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, r6) r8 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r5, r8) r9 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$search(0xa, r9, &(0x7f0000000700)='trusted\x00', &(0x7f0000000740)={'syz', 0x3}, 0xfffffffffffffffb) 23:44:05 executing program 0: fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') 23:44:05 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:05 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) keyctl$search(0xa, r5, &(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, r6) r8 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r5, r8) r9 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$search(0xa, r9, &(0x7f0000000700)='trusted\x00', &(0x7f0000000740)={'syz', 0x3}, 0xfffffffffffffffb) 23:44:05 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:05 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x2c000004) 23:44:05 executing program 0: fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:44:05 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) keyctl$search(0xa, r5, &(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, r6) r8 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r5, r8) r9 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$search(0xa, r9, &(0x7f0000000700)='trusted\x00', &(0x7f0000000740)={'syz', 0x3}, 0xfffffffffffffffb) 23:44:05 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:05 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x2c000004) 23:44:05 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:05 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x2c000004) [ 277.462817] vxfs: WRONG superblock magic 00000000 at 1 23:44:05 executing program 2: r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r1) [ 277.485679] vxfs: unable to read disk superblock at 8 23:44:05 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) keyctl$search(0xa, r5, &(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, r6) r8 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r5, r8) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0, r5) 23:44:05 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:05 executing program 2: r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r1) [ 277.511183] vxfs: can't find superblock. [ 277.526306] vxfs: WRONG superblock magic 00000000 at 1 [ 277.545150] vxfs: unable to read disk superblock at 8 [ 277.554789] vxfs: WRONG superblock magic 00000000 at 1 23:44:05 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x2c000004) 23:44:05 executing program 5: r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) [ 277.571192] vxfs: unable to read disk superblock at 8 [ 277.579991] vxfs: can't find superblock. [ 277.587554] vxfs: can't find superblock. 23:44:05 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) keyctl$search(0xa, r5, &(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, r6) r8 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r5, r8) 23:44:05 executing program 5: r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:05 executing program 2: r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r1) 23:44:05 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x2c000004) 23:44:05 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x2c000004) [ 277.697582] vxfs: WRONG superblock magic 00000000 at 1 23:44:05 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) keyctl$search(0xa, r5, &(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, r6) add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) 23:44:05 executing program 2: r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:05 executing program 5: r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) [ 277.727246] vxfs: unable to read disk superblock at 8 [ 277.734423] vxfs: WRONG superblock magic 00000000 at 1 [ 277.744577] vxfs: unable to read disk superblock at 8 [ 277.751262] vxfs: can't find superblock. 23:44:05 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x2c000004) 23:44:05 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) keyctl$search(0xa, r5, &(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, r6) 23:44:05 executing program 2: r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) [ 277.774069] vxfs: can't find superblock. [ 277.794349] vxfs: WRONG superblock magic 00000000 at 1 [ 277.799903] vxfs: unable to read disk superblock at 8 [ 277.820137] vxfs: can't find superblock. 23:44:05 executing program 5: r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:05 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x2c000004) 23:44:05 executing program 2: r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:05 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x2c000004) 23:44:05 executing program 5: r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) [ 277.933621] print_req_error: I/O error, dev loop3, sector 0 [ 277.940604] vxfs: WRONG superblock magic 00000000 at 1 [ 277.979940] vxfs: unable to read disk superblock at 8 23:44:05 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) [ 278.004804] vxfs: WRONG superblock magic 00000000 at 1 [ 278.016962] vxfs: can't find superblock. [ 278.024367] vxfs: unable to read disk superblock at 8 [ 278.029225] vxfs: WRONG superblock magic 00000000 at 1 [ 278.033634] vxfs: can't find superblock. [ 278.036622] vxfs: unable to read disk superblock at 8 23:44:05 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:05 executing program 5: r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) [ 278.055142] vxfs: can't find superblock. [ 278.088668] print_req_error: I/O error, dev loop4, sector 0 [ 278.094576] Buffer I/O error on dev loop4, logical block 0, async page read [ 278.108817] print_req_error: I/O error, dev loop4, sector 4 [ 278.111571] print_req_error: I/O error, dev loop0, sector 0 [ 278.114576] Buffer I/O error on dev loop4, logical block 2, async page read [ 278.120375] Buffer I/O error on dev loop0, logical block 0, async page read 23:44:06 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) 23:44:06 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) [ 278.127483] print_req_error: I/O error, dev loop4, sector 6 [ 278.138003] print_req_error: I/O error, dev loop0, sector 4 [ 278.140415] Buffer I/O error on dev loop4, logical block 3, async page read [ 278.145992] Buffer I/O error on dev loop0, logical block 2, async page read [ 278.160323] print_req_error: I/O error, dev loop0, sector 6 [ 278.166045] Buffer I/O error on dev loop0, logical block 3, async page read 23:44:06 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) 23:44:06 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) 23:44:06 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:06 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:06 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) [ 278.257413] vxfs: WRONG superblock magic 00000000 at 1 [ 278.267629] vxfs: unable to read disk superblock at 8 [ 278.279635] vxfs: can't find superblock. [ 278.297811] vxfs: WRONG superblock magic 00000000 at 1 23:44:06 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:06 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) [ 278.313317] vxfs: WRONG superblock magic 00000000 at 1 [ 278.331346] vxfs: unable to read disk superblock at 8 [ 278.336584] vxfs: can't find superblock. [ 278.344578] vxfs: unable to read disk superblock at 8 [ 278.364669] print_req_error: I/O error, dev loop3, sector 0 [ 278.370516] Buffer I/O error on dev loop3, logical block 0, async page read [ 278.382678] print_req_error: I/O error, dev loop3, sector 4 [ 278.388489] Buffer I/O error on dev loop3, logical block 2, async page read [ 278.395710] print_req_error: I/O error, dev loop3, sector 6 [ 278.401973] Buffer I/O error on dev loop3, logical block 3, async page read 23:44:06 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:06 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:06 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:06 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) [ 278.426313] vxfs: can't find superblock. 23:44:06 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:06 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:06 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) [ 278.504161] vxfs: WRONG superblock magic 00000000 at 1 [ 278.509899] vxfs: WRONG superblock magic 00000000 at 1 [ 278.516222] vxfs: unable to read disk superblock at 8 [ 278.531590] vxfs: unable to read disk superblock at 8 [ 278.539187] vxfs: can't find superblock. [ 278.550408] vxfs: can't find superblock. 23:44:06 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) 23:44:06 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:06 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:06 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 278.569337] Buffer I/O error on dev loop3, logical block 0, async page read 23:44:06 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:06 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:06 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:06 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:06 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) [ 278.620744] vxfs: WRONG superblock magic 00000000 at 1 [ 278.626223] vxfs: unable to read disk superblock at 8 [ 278.656620] vxfs: can't find superblock. 23:44:06 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) 23:44:06 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 278.706769] vxfs: WRONG superblock magic 00000000 at 1 [ 278.718728] vxfs: unable to read disk superblock at 8 [ 278.741520] vxfs: can't find superblock. 23:44:06 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0), 0x4800) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:06 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:06 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) 23:44:06 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:06 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 278.794681] vxfs: WRONG superblock magic 00000000 at 1 [ 278.817079] vxfs: unable to read disk superblock at 8 [ 278.835377] vxfs: can't find superblock. 23:44:06 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:06 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) 23:44:06 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:06 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:06 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:06 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) [ 278.925952] vxfs: WRONG superblock magic 00000000 at 1 [ 278.942402] vxfs: unable to read disk superblock at 8 23:44:06 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:06 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) 23:44:06 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:06 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) [ 278.982242] vxfs: can't find superblock. 23:44:06 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:06 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:06 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:06 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) 23:44:06 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) 23:44:06 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) [ 279.102785] vxfs: WRONG superblock magic 00000000 at 1 23:44:06 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:07 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0), 0x4800) [ 279.128945] vxfs: unable to read disk superblock at 8 23:44:07 executing program 5: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:07 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:07 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) [ 279.157705] vxfs: can't find superblock. 23:44:07 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0), 0x4800) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:07 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) 23:44:07 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x9f) 23:44:07 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(0x0, &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:07 executing program 5: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:07 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:07 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 23:44:07 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x9f) 23:44:07 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(0x0, &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:07 executing program 5: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:07 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 23:44:07 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) [ 279.340895] vxfs: WRONG superblock magic 00000000 at 1 [ 279.359653] vxfs: unable to read disk superblock at 8 [ 279.386621] vxfs: can't find superblock. 23:44:07 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:07 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(0x0, &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:07 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:07 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x9f) 23:44:07 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 23:44:07 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:07 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), 0x0, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:07 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:07 executing program 1: keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x9f) 23:44:07 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:07 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) [ 279.541545] vxfs: WRONG superblock magic 00000000 at 1 [ 279.555815] vxfs: unable to read disk superblock at 8 23:44:07 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) [ 279.585154] vxfs: can't find superblock. 23:44:07 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:07 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), 0x0, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:07 executing program 1: keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) 23:44:07 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 23:44:07 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:07 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:07 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), 0x0, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:07 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:07 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 23:44:07 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, 0x0, &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:07 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 23:44:07 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) [ 279.747226] vxfs: WRONG superblock magic 00000000 at 1 [ 279.759666] vxfs: unable to read disk superblock at 8 [ 279.795165] vxfs: can't find superblock. 23:44:07 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:07 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:07 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:07 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, 0x0, &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:07 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 23:44:07 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:07 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, 0x0, &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:07 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 23:44:07 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:07 executing program 3: socket$igmp(0x2, 0x3, 0x2) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:07 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:07 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r1) [ 279.927034] vxfs: WRONG superblock magic 00000000 at 1 [ 279.943181] vxfs: unable to read disk superblock at 8 [ 279.964337] vxfs: can't find superblock. 23:44:07 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:07 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', 0x0, 0x0) 23:44:07 executing program 0: socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 23:44:07 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) 23:44:07 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r1) 23:44:07 executing program 3: syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:07 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) 23:44:07 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', 0x0, 0x0) 23:44:07 executing program 3: syz_open_dev$vcsn(0x0, 0x2f78, 0x480480) 23:44:07 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r1) 23:44:07 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 23:44:08 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', 0x0, 0x0) [ 280.141817] vxfs: WRONG superblock magic 00000000 at 1 [ 280.165333] vxfs: unable to read disk superblock at 8 23:44:08 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:08 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, 0x0, &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:08 executing program 3: syz_open_dev$vcsn(0x0, 0x2f78, 0x480480) 23:44:08 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) [ 280.189188] vxfs: can't find superblock. 23:44:08 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 23:44:08 executing program 5: socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 23:44:08 executing program 3: syz_open_dev$vcsn(0x0, 0x2f78, 0x480480) 23:44:08 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 23:44:08 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, 0x0, &(0x7f0000000440)={'syz', 0x2}, r2) [ 280.341759] vxfs: WRONG superblock magic 00000000 at 1 23:44:08 executing program 1: socket$igmp(0x2, 0x3, 0x2) 23:44:08 executing program 5: socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 23:44:08 executing program 3: syz_open_dev$vcsn(&(0x7f00000005c0), 0x0, 0x480480) [ 280.364479] vxfs: unable to read disk superblock at 8 [ 280.396094] vxfs: can't find superblock. 23:44:08 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:08 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 23:44:08 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, 0x0, &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:08 executing program 1: socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 23:44:08 executing program 5: socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 23:44:08 executing program 3: syz_open_dev$vcsn(&(0x7f00000005c0), 0x0, 0x0) 23:44:08 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', 0x0, r2) 23:44:08 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, 0x0, &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:08 executing program 3: syz_open_dev$vcsn(&(0x7f00000005c0), 0x0, 0x0) 23:44:08 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 23:44:08 executing program 1: socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 23:44:08 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', 0x0, r2) [ 280.539419] vxfs: WRONG superblock magic 00000000 at 1 [ 280.569172] vxfs: unable to read disk superblock at 8 [ 280.584023] vxfs: can't find superblock. 23:44:08 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:08 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) 23:44:08 executing program 5: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 23:44:08 executing program 1: socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 23:44:08 executing program 3: syz_open_dev$vcsn(&(0x7f00000005c0), 0x0, 0x0) 23:44:08 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', 0x0, r2) 23:44:08 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) 23:44:08 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:08 executing program 5: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 23:44:08 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:08 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) [ 280.730822] vxfs: WRONG superblock magic 00000000 at 1 23:44:08 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) [ 280.761599] vxfs: unable to read disk superblock at 8 23:44:08 executing program 5: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 23:44:08 executing program 2: socket$igmp(0x2, 0x3, 0x2) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:08 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 280.785355] vxfs: can't find superblock. [ 280.796024] vxfs: WRONG superblock magic 00000000 at 1 [ 280.812401] vxfs: WRONG superblock magic 00000000 at 1 [ 280.820450] vxfs: unable to read disk superblock at 8 [ 280.826574] vxfs: unable to read disk superblock at 8 23:44:08 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) [ 280.850804] vxfs: can't find superblock. [ 280.860427] vxfs: can't find superblock. 23:44:08 executing program 2: socket$igmp(0x2, 0x3, 0x2) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:08 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:08 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 280.904705] vxfs: WRONG superblock magic 00000000 at 1 [ 280.916964] vxfs: unable to read disk superblock at 8 23:44:08 executing program 0: socket$igmp(0x2, 0x3, 0x2) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) 23:44:08 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 280.968097] vxfs: can't find superblock. 23:44:08 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:08 executing program 2: socket$igmp(0x2, 0x3, 0x2) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) [ 281.016427] vxfs: WRONG superblock magic 00000000 at 1 23:44:08 executing program 0: socket$igmp(0x2, 0x3, 0x2) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) [ 281.042450] vxfs: unable to read disk superblock at 8 [ 281.051097] vxfs: WRONG superblock magic 00000000 at 1 [ 281.063459] vxfs: unable to read disk superblock at 8 [ 281.069690] vxfs: can't find superblock. [ 281.087338] vxfs: WRONG superblock magic 00000000 at 1 23:44:08 executing program 0: socket$igmp(0x2, 0x3, 0x2) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) 23:44:08 executing program 2: socket$igmp(0x2, 0x3, 0x2) 23:44:09 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:09 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 281.095733] vxfs: unable to read disk superblock at 8 [ 281.101619] vxfs: can't find superblock. [ 281.135958] vxfs: can't find superblock. 23:44:09 executing program 0: syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) [ 281.181060] vxfs: WRONG superblock magic 00000000 at 1 23:44:09 executing program 2: socket$igmp(0x2, 0x3, 0x2) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) 23:44:09 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:09 executing program 0: syz_open_dev$cec(0x0, 0x2, 0x2) [ 281.207621] vxfs: unable to read disk superblock at 8 23:44:09 executing program 2: socket$igmp(0x2, 0x3, 0x2) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) [ 281.253813] vxfs: can't find superblock. 23:44:09 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:09 executing program 0: syz_open_dev$cec(0x0, 0x2, 0x2) [ 281.295192] vxfs: WRONG superblock magic 00000000 at 1 [ 281.309834] vxfs: WRONG superblock magic 00000000 at 1 [ 281.316063] vxfs: unable to read disk superblock at 8 [ 281.342799] vxfs: WRONG superblock magic 00000000 at 1 [ 281.353948] vxfs: unable to read disk superblock at 8 [ 281.361620] vxfs: unable to read disk superblock at 8 [ 281.374663] vxfs: can't find superblock. [ 281.380526] vxfs: can't find superblock. [ 281.386902] vxfs: can't find superblock. 23:44:09 executing program 2: socket$igmp(0x2, 0x3, 0x2) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) [ 281.387640] vxfs: WRONG superblock magic 00000000 at 1 23:44:09 executing program 0: syz_open_dev$cec(0x0, 0x2, 0x2) [ 281.422213] vxfs: unable to read disk superblock at 8 23:44:09 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) 23:44:09 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:09 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 23:44:09 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:09 executing program 2: syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) [ 281.487996] vxfs: can't find superblock. 23:44:09 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) 23:44:09 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:09 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:09 executing program 2: syz_open_dev$cec(0x0, 0x2, 0x2) 23:44:09 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) [ 281.592662] vxfs: WRONG superblock magic 00000000 at 1 [ 281.600791] vxfs: WRONG superblock magic 00000000 at 1 [ 281.614893] vxfs: unable to read disk superblock at 8 [ 281.622522] vxfs: unable to read disk superblock at 8 [ 281.633521] vxfs: can't find superblock. 23:44:09 executing program 2: syz_open_dev$cec(0x0, 0x2, 0x2) [ 281.651380] vxfs: WRONG superblock magic 00000000 at 1 [ 281.659037] vxfs: can't find superblock. [ 281.661528] vxfs: unable to read disk superblock at 8 [ 281.673883] vxfs: WRONG superblock magic 00000000 at 1 [ 281.693810] vxfs: unable to read disk superblock at 8 23:44:09 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:09 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:09 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) [ 281.696183] vxfs: can't find superblock. [ 281.716002] vxfs: can't find superblock. 23:44:09 executing program 2: syz_open_dev$cec(0x0, 0x2, 0x2) 23:44:09 executing program 4: socket$igmp(0x2, 0x3, 0x2) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:09 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) 23:44:09 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 281.810266] vxfs: WRONG superblock magic 00000000 at 1 [ 281.826207] vxfs: unable to read disk superblock at 8 [ 281.838782] vxfs: WRONG superblock magic 00000000 at 1 [ 281.848907] vxfs: can't find superblock. [ 281.853645] vxfs: unable to read disk superblock at 8 23:44:09 executing program 2: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 23:44:09 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:09 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 281.859897] vxfs: can't find superblock. [ 281.876922] vxfs: WRONG superblock magic 00000000 at 1 [ 281.888277] vxfs: unable to read disk superblock at 8 [ 281.896751] vxfs: can't find superblock. 23:44:09 executing program 2: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:09 executing program 3: socket$igmp(0x2, 0x3, 0x2) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) 23:44:09 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 281.949614] vxfs: WRONG superblock magic 00000000 at 1 [ 281.968816] vxfs: unable to read disk superblock at 8 [ 281.984312] vxfs: WRONG superblock magic 00000000 at 1 [ 281.995177] vxfs: can't find superblock. 23:44:09 executing program 3: syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) 23:44:09 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 282.005698] vxfs: WRONG superblock magic 00000000 at 1 [ 282.012481] vxfs: unable to read disk superblock at 8 [ 282.030323] vxfs: unable to read disk superblock at 8 [ 282.036846] vxfs: can't find superblock. [ 282.049067] vxfs: can't find superblock. [ 282.112533] vxfs: WRONG superblock magic 00000000 at 1 [ 282.123084] vxfs: WRONG superblock magic 00000000 at 1 [ 282.129080] vxfs: unable to read disk superblock at 8 [ 282.134539] vxfs: can't find superblock. [ 282.144934] vxfs: WRONG superblock magic 00000000 at 1 [ 282.147208] vxfs: unable to read disk superblock at 8 [ 282.151100] vxfs: unable to read disk superblock at 8 23:44:10 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:10 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:10 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:10 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 282.161311] vxfs: can't find superblock. [ 282.172776] vxfs: can't find superblock. 23:44:10 executing program 3: syz_open_dev$cec(0x0, 0x2, 0x2) 23:44:10 executing program 2: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:10 executing program 3: syz_open_dev$cec(0x0, 0x2, 0x2) [ 282.271621] vxfs: WRONG superblock magic 00000000 at 1 [ 282.275718] vxfs: WRONG superblock magic 00000000 at 1 [ 282.298878] vxfs: unable to read disk superblock at 8 [ 282.305626] vxfs: WRONG superblock magic 00000000 at 1 [ 282.315770] vxfs: can't find superblock. 23:44:10 executing program 3: syz_open_dev$cec(0x0, 0x2, 0x2) [ 282.325044] vxfs: WRONG superblock magic 00000000 at 1 [ 282.326907] vxfs: unable to read disk superblock at 8 [ 282.337511] vxfs: unable to read disk superblock at 8 [ 282.342686] vxfs: can't find superblock. [ 282.342703] vxfs: can't find superblock. [ 282.356577] vxfs: unable to read disk superblock at 8 23:44:10 executing program 5: socket$igmp(0x2, 0x3, 0x2) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 282.378826] vxfs: can't find superblock. 23:44:10 executing program 4: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:10 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:10 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:10 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 282.450020] vxfs: WRONG superblock magic 00000000 at 1 [ 282.455452] vxfs: unable to read disk superblock at 8 [ 282.477600] vxfs: can't find superblock. [ 282.508614] vxfs: WRONG superblock magic 00000000 at 1 [ 282.535184] vxfs: unable to read disk superblock at 8 23:44:10 executing program 2: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:10 executing program 4: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 282.560250] vxfs: WRONG superblock magic 00000000 at 1 [ 282.575581] vxfs: can't find superblock. [ 282.583337] vxfs: unable to read disk superblock at 8 [ 282.594523] vxfs: can't find superblock. [ 282.603986] vxfs: WRONG superblock magic 00000000 at 1 [ 282.609910] vxfs: unable to read disk superblock at 8 [ 282.615901] vxfs: can't find superblock. 23:44:10 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:10 executing program 0: socket$igmp(0x2, 0x3, 0x2) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 282.650635] vxfs: WRONG superblock magic 00000000 at 1 [ 282.654381] vxfs: WRONG superblock magic 00000000 at 1 [ 282.661849] vxfs: unable to read disk superblock at 8 [ 282.674585] vxfs: can't find superblock. [ 282.693452] vxfs: unable to read disk superblock at 8 23:44:10 executing program 4: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:10 executing program 1: socket$igmp(0x2, 0x3, 0x2) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 282.699251] vxfs: can't find superblock. 23:44:10 executing program 2: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 282.770852] vxfs: WRONG superblock magic 00000000 at 1 [ 282.786684] vxfs: WRONG superblock magic 00000000 at 1 [ 282.791989] vxfs: WRONG superblock magic 00000000 at 1 [ 282.792064] vxfs: unable to read disk superblock at 8 [ 282.797777] vxfs: unable to read disk superblock at 8 [ 282.816132] vxfs: can't find superblock. 23:44:10 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:10 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:10 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 282.842987] vxfs: can't find superblock. [ 282.847238] vxfs: unable to read disk superblock at 8 [ 282.854915] vxfs: can't find superblock. 23:44:10 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 282.900927] vxfs: WRONG superblock magic 00000000 at 1 [ 282.906645] vxfs: unable to read disk superblock at 8 23:44:10 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 282.943429] vxfs: can't find superblock. [ 282.956124] vxfs: WRONG superblock magic 00000000 at 1 [ 282.963918] vxfs: WRONG superblock magic 00000000 at 1 [ 282.980463] vxfs: unable to read disk superblock at 8 [ 282.983722] vxfs: WRONG superblock magic 00000000 at 1 23:44:10 executing program 2: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:10 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 282.988472] vxfs: unable to read disk superblock at 8 [ 282.995000] vxfs: unable to read disk superblock at 8 [ 283.003080] vxfs: can't find superblock. [ 283.011805] vxfs: can't find superblock. [ 283.012577] vxfs: can't find superblock. 23:44:10 executing program 1: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 283.081201] vxfs: WRONG superblock magic 00000000 at 1 [ 283.098334] vxfs: unable to read disk superblock at 8 [ 283.110591] vxfs: can't find superblock. 23:44:11 executing program 1: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 283.128406] vxfs: WRONG superblock magic 00000000 at 1 [ 283.134399] vxfs: unable to read disk superblock at 8 [ 283.141520] vxfs: can't find superblock. [ 283.143644] vxfs: WRONG superblock magic 00000000 at 1 [ 283.155439] vxfs: unable to read disk superblock at 8 [ 283.162717] vxfs: can't find superblock. 23:44:11 executing program 0: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:11 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:11 executing program 2: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 283.221333] print_req_error: 36 callbacks suppressed [ 283.221340] print_req_error: I/O error, dev loop2, sector 0 [ 283.232292] buffer_io_error: 35 callbacks suppressed [ 283.232299] Buffer I/O error on dev loop2, logical block 0, async page read [ 283.244644] print_req_error: I/O error, dev loop2, sector 4 [ 283.250408] Buffer I/O error on dev loop2, logical block 2, async page read [ 283.257719] print_req_error: I/O error, dev loop2, sector 6 [ 283.263432] Buffer I/O error on dev loop2, logical block 3, async page read 23:44:11 executing program 5: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:11 executing program 3: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:11 executing program 0: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:11 executing program 5: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:11 executing program 1: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:11 executing program 3: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:11 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 283.485001] vxfs: WRONG superblock magic 00000000 at 1 [ 283.492902] vxfs: unable to read disk superblock at 8 [ 283.503098] vxfs: can't find superblock. 23:44:11 executing program 2: socket$igmp(0x2, 0x3, 0x2) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:11 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:11 executing program 0: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:11 executing program 3: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:11 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:11 executing program 5: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 283.839165] vxfs: WRONG superblock magic 00000000 at 1 [ 283.853446] vxfs: unable to read disk superblock at 8 [ 283.866514] vxfs: can't find superblock. 23:44:11 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:11 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:11 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:11 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 284.011056] vxfs: WRONG superblock magic 00000000 at 1 [ 284.020403] vxfs: unable to read disk superblock at 8 [ 284.025619] vxfs: can't find superblock. [ 284.069885] vxfs: WRONG superblock magic 00000000 at 1 [ 284.082896] print_req_error: I/O error, dev loop4, sector 0 [ 284.083968] vxfs: unable to read disk superblock at 8 [ 284.088747] Buffer I/O error on dev loop4, logical block 0, async page read [ 284.095286] vxfs: can't find superblock. [ 284.102157] print_req_error: I/O error, dev loop4, sector 4 [ 284.111625] Buffer I/O error on dev loop4, logical block 2, async page read 23:44:11 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:11 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 284.121045] print_req_error: I/O error, dev loop4, sector 6 [ 284.126940] Buffer I/O error on dev loop4, logical block 3, async page read 23:44:12 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 284.220965] print_req_error: I/O error, dev loop2, sector 0 [ 284.226714] Buffer I/O error on dev loop2, logical block 0, async page read [ 284.236770] print_req_error: I/O error, dev loop2, sector 4 [ 284.245628] Buffer I/O error on dev loop2, logical block 2, async page read [ 284.253036] print_req_error: I/O error, dev loop2, sector 6 [ 284.258824] Buffer I/O error on dev loop2, logical block 3, async page read 23:44:12 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 284.302667] vxfs: WRONG superblock magic 00000000 at 1 [ 284.330823] vxfs: unable to read disk superblock at 8 23:44:12 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 284.356529] vxfs: can't find superblock. [ 284.408889] vxfs: WRONG superblock magic 00000000 at 1 [ 284.414790] vxfs: unable to read disk superblock at 8 [ 284.423976] vxfs: can't find superblock. [ 284.448139] print_req_error: I/O error, dev loop5, sector 0 23:44:12 executing program 2: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 284.454335] Buffer I/O error on dev loop2, logical block 0, async page read 23:44:12 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 284.488414] vxfs: WRONG superblock magic 00000000 at 1 [ 284.502398] vxfs: WRONG superblock magic 00000000 at 8 [ 284.514385] vxfs: can't find superblock. 23:44:12 executing program 2: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 284.597851] vxfs: WRONG superblock magic 00000000 at 1 [ 284.610965] vxfs: unable to read disk superblock at 8 [ 284.627007] vxfs: WRONG superblock magic 00000000 at 1 [ 284.643528] vxfs: can't find superblock. 23:44:12 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 284.650201] vxfs: unable to read disk superblock at 8 [ 284.669904] vxfs: can't find superblock. 23:44:12 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 2: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 284.708327] vxfs: WRONG superblock magic 00000000 at 1 [ 284.716565] vxfs: WRONG superblock magic 00000000 at 8 [ 284.724777] vxfs: can't find superblock. 23:44:12 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 284.822967] vxfs: WRONG superblock magic 00000000 at 1 23:44:12 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 284.844392] vxfs: WRONG superblock magic 00000000 at 8 23:44:12 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 284.874073] vxfs: can't find superblock. 23:44:12 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 284.919093] vxfs: WRONG superblock magic 00000000 at 1 [ 284.954710] vxfs: WRONG superblock magic 00000000 at 8 [ 284.990519] vxfs: WRONG superblock magic 00000000 at 1 [ 284.994130] vxfs: WRONG superblock magic 00000000 at 1 [ 285.002642] vxfs: can't find superblock. [ 285.014948] vxfs: unable to read disk superblock at 8 [ 285.026534] vxfs: can't find superblock. [ 285.031389] vxfs: WRONG superblock magic 00000000 at 8 23:44:12 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 285.042070] vxfs: WRONG superblock magic 00000000 at 1 [ 285.051242] vxfs: WRONG superblock magic 00000000 at 8 [ 285.060008] vxfs: can't find superblock. [ 285.075195] vxfs: can't find superblock. 23:44:12 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:12 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:13 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 285.158679] vxfs: WRONG superblock magic 00000000 at 1 [ 285.171202] vxfs: WRONG superblock magic 00000000 at 8 [ 285.186781] vxfs: WRONG superblock magic 00000000 at 1 [ 285.196813] vxfs: unable to read disk superblock at 8 23:44:13 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:13 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 285.206833] vxfs: can't find superblock. [ 285.212826] vxfs: can't find superblock. [ 285.227333] vxfs: WRONG superblock magic 00000000 at 1 [ 285.244458] vxfs: WRONG superblock magic 00000000 at 1 23:44:13 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:13 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:13 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 285.296268] vxfs: WRONG superblock magic 00000000 at 8 [ 285.303307] vxfs: WRONG superblock magic 00000000 at 8 [ 285.321071] vxfs: can't find superblock. [ 285.321351] vxfs: can't find superblock. 23:44:13 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:13 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:13 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 285.362774] vxfs: WRONG superblock magic 00000000 at 1 [ 285.376255] vxfs: WRONG superblock magic 00000000 at 8 [ 285.381472] vxfs: WRONG superblock magic 00000000 at 1 [ 285.409403] vxfs: can't find superblock. [ 285.416645] vxfs: WRONG superblock magic 00000000 at 1 [ 285.432408] vxfs: WRONG superblock magic 00000000 at 8 [ 285.436550] vxfs: WRONG superblock magic 00000000 at 8 [ 285.445308] vxfs: can't find superblock. 23:44:13 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:13 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 285.464267] vxfs: can't find superblock. [ 285.466891] vxfs: WRONG superblock magic 00000000 at 1 [ 285.491682] vxfs: WRONG superblock magic 00000000 at 1 [ 285.495874] vxfs: WRONG superblock magic 00000000 at 8 [ 285.505910] vxfs: unable to read disk superblock at 8 23:44:13 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 285.507634] vxfs: WRONG superblock magic 00000000 at 1 [ 285.517063] vxfs: unable to read disk superblock at 8 [ 285.534089] vxfs: can't find superblock. [ 285.534410] vxfs: can't find superblock. [ 285.545261] vxfs: can't find superblock. [ 285.551643] vxfs: WRONG superblock magic 00000000 at 1 23:44:13 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:13 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 285.563763] vxfs: WRONG superblock magic 00000000 at 8 [ 285.571542] vxfs: can't find superblock. 23:44:13 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:13 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 285.614366] vxfs: WRONG superblock magic 00000000 at 1 [ 285.633151] vxfs: WRONG superblock magic 00000000 at 8 [ 285.642932] vxfs: WRONG superblock magic 00000000 at 1 [ 285.651902] vxfs: WRONG superblock magic 00000000 at 8 [ 285.655738] vxfs: WRONG superblock magic 00000000 at 1 23:44:13 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 285.659216] vxfs: can't find superblock. [ 285.667016] vxfs: can't find superblock. [ 285.672348] vxfs: WRONG superblock magic 00000000 at 8 23:44:13 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:13 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:13 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 285.712384] vxfs: can't find superblock. [ 285.715003] vxfs: WRONG superblock magic 00000000 at 1 [ 285.735732] vxfs: unable to read disk superblock at 8 [ 285.755217] vxfs: WRONG superblock magic 00000000 at 1 23:44:13 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 285.774272] vxfs: WRONG superblock magic 00000000 at 8 [ 285.776433] vxfs: WRONG superblock magic 00000000 at 1 [ 285.787463] vxfs: can't find superblock. [ 285.804791] vxfs: can't find superblock. 23:44:13 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 285.823257] vxfs: unable to read disk superblock at 8 [ 285.829519] vxfs: can't find superblock. 23:44:13 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 285.881928] vxfs: WRONG superblock magic 00000000 at 1 23:44:13 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 285.905931] vxfs: WRONG superblock magic 00000000 at 1 [ 285.917951] vxfs: WRONG superblock magic 00000000 at 8 [ 285.934726] vxfs: WRONG superblock magic 00000000 at 8 [ 285.940570] vxfs: can't find superblock. 23:44:13 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:13 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) [ 285.957441] vxfs: can't find superblock. [ 285.972102] vxfs: WRONG superblock magic 00000000 at 1 23:44:13 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 285.998466] vxfs: WRONG superblock magic 00000000 at 1 [ 286.003743] vxfs: WRONG superblock magic 00000000 at 1 [ 286.004177] vxfs: WRONG superblock magic 00000000 at 8 [ 286.021375] vxfs: unable to read disk superblock at 8 [ 286.029054] vxfs: can't find superblock. [ 286.036487] vxfs: can't find superblock. 23:44:13 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 286.044081] vxfs: WRONG superblock magic 00000000 at 8 [ 286.064215] vxfs: can't find superblock. [ 286.075943] vxfs: WRONG superblock magic 00000000 at 1 23:44:13 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:13 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) 23:44:14 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 286.093956] vxfs: WRONG superblock magic 00000000 at 1 [ 286.096521] vxfs: WRONG superblock magic 00000000 at 8 [ 286.106570] vxfs: can't find superblock. [ 286.110305] vxfs: WRONG superblock magic 00000000 at 8 [ 286.136967] vxfs: can't find superblock. 23:44:14 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:14 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) [ 286.182391] vxfs: WRONG superblock magic 00000000 at 1 [ 286.237494] vxfs: WRONG superblock magic 00000000 at 1 [ 286.237550] vxfs: WRONG superblock magic 00000000 at 8 [ 286.253435] vxfs: WRONG superblock magic 00000000 at 8 [ 286.274801] vxfs: can't find superblock. [ 286.278558] vxfs: can't find superblock. 23:44:14 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) 23:44:14 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) 23:44:14 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:14 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 286.297559] vxfs: WRONG superblock magic 00000000 at 1 [ 286.310448] vxfs: WRONG superblock magic 00000000 at 8 [ 286.314155] vxfs: WRONG superblock magic 00000000 at 1 [ 286.323396] vxfs: can't find superblock. [ 286.328232] vxfs: WRONG superblock magic 00000000 at 8 [ 286.334333] vxfs: can't find superblock. 23:44:14 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:14 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:14 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:14 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) [ 286.484008] vxfs: WRONG superblock magic 00000000 at 1 [ 286.496437] vxfs: WRONG superblock magic 00000000 at 8 [ 286.510103] vxfs: can't find superblock. [ 286.524074] vxfs: WRONG superblock magic 00000000 at 1 [ 286.530095] vxfs: WRONG superblock magic 00000000 at 8 [ 286.535438] vxfs: can't find superblock. 23:44:14 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 286.564707] vxfs: WRONG superblock magic 00000000 at 1 [ 286.572663] vxfs: WRONG superblock magic 00000000 at 8 [ 286.581323] vxfs: WRONG superblock magic 00000000 at 1 [ 286.586461] vxfs: can't find superblock. 23:44:14 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) 23:44:14 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) [ 286.621607] vxfs: WRONG superblock magic 00000000 at 1 [ 286.631450] vxfs: unable to read disk superblock at 8 [ 286.645571] vxfs: WRONG superblock magic 00000000 at 8 [ 286.665004] vxfs: can't find superblock. [ 286.671031] vxfs: can't find superblock. 23:44:14 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) 23:44:14 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:14 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 286.738354] vxfs: WRONG superblock magic 00000000 at 1 23:44:14 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 286.776335] vxfs: WRONG superblock magic 00000000 at 8 [ 286.788085] vxfs: can't find superblock. 23:44:14 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) 23:44:14 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) [ 286.855299] vxfs: WRONG superblock magic 00000000 at 1 [ 286.862604] vxfs: unable to read disk superblock at 8 [ 286.874562] vxfs: WRONG superblock magic 00000000 at 1 [ 286.892528] vxfs: can't find superblock. [ 286.899974] vxfs: unable to read disk superblock at 8 23:44:14 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:14 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) [ 286.905322] vxfs: can't find superblock. 23:44:14 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 286.984599] vxfs: WRONG superblock magic 00000000 at 1 [ 287.007213] vxfs: unable to read disk superblock at 8 23:44:14 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) [ 287.030981] vxfs: can't find superblock. 23:44:14 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) [ 287.099380] vxfs: WRONG superblock magic 00000000 at 1 [ 287.105289] vxfs: WRONG superblock magic 00000000 at 8 [ 287.111255] vxfs: can't find superblock. 23:44:15 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:15 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 287.154163] vxfs: WRONG superblock magic 00000000 at 1 [ 287.159677] vxfs: unable to read disk superblock at 8 [ 287.164926] vxfs: can't find superblock. 23:44:15 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:15 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}]}) 23:44:15 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 287.328381] vxfs: WRONG superblock magic 00000000 at 1 [ 287.331237] vxfs: WRONG superblock magic 00000000 at 1 [ 287.344240] vxfs: WRONG superblock magic 00000000 at 1 [ 287.362019] vxfs: WRONG superblock magic 00000000 at 8 [ 287.368675] vxfs: WRONG superblock magic 00000000 at 1 [ 287.373434] vxfs: can't find superblock. 23:44:15 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) [ 287.374721] vxfs: unable to read disk superblock at 8 [ 287.383654] vxfs: unable to read disk superblock at 8 [ 287.408471] vxfs: unable to read disk superblock at 8 [ 287.413851] vxfs: can't find superblock. [ 287.422950] vxfs: can't find superblock. 23:44:15 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 287.426278] vxfs: WRONG superblock magic 00000000 at 1 [ 287.427681] vxfs: can't find superblock. [ 287.442752] vxfs: unable to read disk superblock at 8 [ 287.472618] vxfs: can't find superblock. 23:44:15 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:15 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:15 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:15 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:15 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 287.611566] vxfs: WRONG superblock magic 00000000 at 1 [ 287.631061] vxfs: WRONG superblock magic 00000000 at 1 [ 287.644888] vxfs: WRONG superblock magic 00000000 at 8 [ 287.651776] vxfs: WRONG superblock magic 00000000 at 1 [ 287.653317] vxfs: WRONG superblock magic 00000000 at 1 [ 287.660586] vxfs: WRONG superblock magic 00000000 at 1 [ 287.663732] vxfs: unable to read disk superblock at 8 [ 287.673015] vxfs: unable to read disk superblock at 8 [ 287.678628] vxfs: unable to read disk superblock at 8 [ 287.682050] vxfs: unable to read disk superblock at 8 [ 287.685043] vxfs: can't find superblock. [ 287.694714] vxfs: can't find superblock. [ 287.695101] vxfs: can't find superblock. [ 287.704674] vxfs: WRONG superblock magic 00000000 at 1 23:44:15 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) [ 287.709035] vxfs: can't find superblock. [ 287.710953] vxfs: can't find superblock. [ 287.721621] vxfs: unable to read disk superblock at 8 [ 287.727952] vxfs: can't find superblock. 23:44:15 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:15 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}]}) 23:44:15 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:15 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:15 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:15 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) [ 287.905780] vxfs: WRONG superblock magic 00000000 at 1 [ 287.919071] vxfs: unable to read disk superblock at 8 [ 287.924575] vxfs: can't find superblock. [ 287.986829] vxfs: WRONG superblock magic 00000000 at 1 [ 287.996029] vxfs: unable to read disk superblock at 8 [ 288.002503] vxfs: can't find superblock. 23:44:15 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:15 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}]}) [ 288.041102] vxfs: WRONG superblock magic 00000000 at 1 [ 288.065865] vxfs: WRONG superblock magic 00000000 at 1 [ 288.065959] vxfs: WRONG superblock magic 00000000 at 1 [ 288.078288] vxfs: unable to read disk superblock at 8 [ 288.085645] vxfs: unable to read disk superblock at 8 [ 288.091092] vxfs: unable to read disk superblock at 8 [ 288.091099] vxfs: can't find superblock. [ 288.108763] vxfs: can't find superblock. [ 288.118617] vxfs: can't find superblock. 23:44:16 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) 23:44:16 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}]}) 23:44:16 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:16 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}]}) [ 288.191862] vxfs: WRONG superblock magic 00000000 at 1 [ 288.194393] vxfs: WRONG superblock magic 00000000 at 1 [ 288.209685] vxfs: unable to read disk superblock at 8 [ 288.222014] vxfs: unable to read disk superblock at 8 [ 288.222057] vxfs: can't find superblock. [ 288.271428] vxfs: can't find superblock. 23:44:16 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:16 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:16 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}]}) [ 288.371769] vxfs: WRONG superblock magic 00000000 at 1 [ 288.384698] vxfs: unable to read disk superblock at 8 [ 288.392247] vxfs: can't find superblock. [ 288.407122] vxfs: WRONG superblock magic 00000000 at 1 [ 288.420451] vxfs: WRONG superblock magic 00000000 at 1 [ 288.423523] vxfs: unable to read disk superblock at 8 [ 288.440348] vxfs: unable to read disk superblock at 8 [ 288.456400] vxfs: can't find superblock. [ 288.464791] print_req_error: 42 callbacks suppressed 23:44:16 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) [ 288.464797] print_req_error: I/O error, dev loop1, sector 0 [ 288.469810] vxfs: can't find superblock. [ 288.470389] buffer_io_error: 35 callbacks suppressed [ 288.470395] Buffer I/O error on dev loop1, logical block 0, async page read [ 288.493154] print_req_error: I/O error, dev loop1, sector 4 [ 288.499381] Buffer I/O error on dev loop1, logical block 2, async page read [ 288.506518] print_req_error: I/O error, dev loop1, sector 6 [ 288.519774] Buffer I/O error on dev loop1, logical block 3, async page read 23:44:16 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) [ 288.553750] print_req_error: I/O error, dev loop0, sector 0 [ 288.580328] vxfs: WRONG superblock magic 00000000 at 1 [ 288.598248] vxfs: unable to read disk superblock at 8 [ 288.603983] vxfs: can't find superblock. [ 288.623554] vxfs: WRONG superblock magic 00000000 at 1 [ 288.634969] vxfs: unable to read disk superblock at 8 [ 288.644777] vxfs: WRONG superblock magic 00000000 at 1 [ 288.645726] vxfs: WRONG superblock magic 00000000 at 1 [ 288.669186] print_req_error: I/O error, dev loop5, sector 0 [ 288.675003] Buffer I/O error on dev loop5, logical block 0, async page read [ 288.681186] vxfs: WRONG superblock magic 00000000 at 1 [ 288.687102] print_req_error: I/O error, dev loop5, sector 4 [ 288.689376] vxfs: can't find superblock. 23:44:16 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) [ 288.695058] Buffer I/O error on dev loop5, logical block 2, async page read [ 288.699300] vxfs: unable to read disk superblock at 8 [ 288.706370] print_req_error: I/O error, dev loop5, sector 6 [ 288.711698] vxfs: unable to read disk superblock at 8 [ 288.717223] Buffer I/O error on dev loop5, logical block 3, async page read [ 288.730140] vxfs: can't find superblock. [ 288.734409] vxfs: can't find superblock. [ 288.751502] vxfs: unable to read disk superblock at 8 23:44:16 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:16 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 288.778074] vxfs: can't find superblock. 23:44:16 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) [ 288.813627] print_req_error: I/O error, dev loop3, sector 0 [ 288.820327] Buffer I/O error on dev loop3, logical block 0, async page read [ 288.829262] print_req_error: I/O error, dev loop3, sector 4 [ 288.835015] Buffer I/O error on dev loop3, logical block 2, async page read [ 288.842522] print_req_error: I/O error, dev loop3, sector 6 [ 288.848323] Buffer I/O error on dev loop3, logical block 3, async page read 23:44:16 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) [ 288.957087] vxfs: WRONG superblock magic 00000000 at 1 [ 288.970070] vxfs: WRONG superblock magic 00000000 at 1 [ 289.002203] vxfs: unable to read disk superblock at 8 23:44:16 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}]}) [ 289.024449] vxfs: unable to read disk superblock at 8 [ 289.062399] vxfs: can't find superblock. [ 289.074148] vxfs: WRONG superblock magic 00000000 at 1 [ 289.090694] vxfs: can't find superblock. [ 289.098652] vxfs: WRONG superblock magic 00000000 at 1 [ 289.133460] vxfs: WRONG superblock magic 00000000 at 1 [ 289.147057] vxfs: unable to read disk superblock at 8 [ 289.156632] vxfs: unable to read disk superblock at 8 [ 289.175512] vxfs: can't find superblock. 23:44:17 executing program 4: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:17 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 289.197804] vxfs: unable to read disk superblock at 8 [ 289.214592] vxfs: can't find superblock. [ 289.235127] vxfs: WRONG superblock magic 00000000 at 1 23:44:17 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:17 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) [ 289.252507] vxfs: unable to read disk superblock at 8 [ 289.261373] vxfs: can't find superblock. [ 289.291213] vxfs: can't find superblock. 23:44:17 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}]}) 23:44:17 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:17 executing program 4: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) [ 289.383668] vxfs: WRONG superblock magic 00000000 at 1 [ 289.390607] vxfs: WRONG superblock magic 00000000 at 1 [ 289.396068] vxfs: unable to read disk superblock at 8 [ 289.399745] vxfs: unable to read disk superblock at 8 [ 289.402535] vxfs: can't find superblock. [ 289.407593] vxfs: can't find superblock. 23:44:17 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:17 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) [ 289.522289] Buffer I/O error on dev loop0, logical block 0, async page read [ 289.557536] vxfs: WRONG superblock magic 00000000 at 1 [ 289.566349] vxfs: WRONG superblock magic 00000000 at 1 23:44:17 executing program 4: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) [ 289.574343] vxfs: WRONG superblock magic 00000000 at 1 [ 289.576738] vxfs: unable to read disk superblock at 8 [ 289.583077] vxfs: unable to read disk superblock at 8 [ 289.592653] vxfs: unable to read disk superblock at 8 [ 289.603416] vxfs: can't find superblock. [ 289.607925] vxfs: can't find superblock. [ 289.615786] vxfs: can't find superblock. 23:44:17 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) [ 289.621813] vxfs: WRONG superblock magic 00000000 at 1 [ 289.627919] vxfs: unable to read disk superblock at 8 [ 289.633288] vxfs: can't find superblock. 23:44:17 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:17 executing program 3: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:17 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}]}) 23:44:17 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}]}) 23:44:17 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) [ 289.852056] vxfs: WRONG superblock magic 00000000 at 1 [ 289.858892] vxfs: unable to read disk superblock at 8 [ 289.864171] vxfs: can't find superblock. 23:44:17 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 289.897399] vxfs: WRONG superblock magic 00000000 at 1 [ 289.905408] vxfs: WRONG superblock magic 00000000 at 1 [ 289.911158] vxfs: WRONG superblock magic 00000000 at 1 [ 289.916514] vxfs: unable to read disk superblock at 8 [ 289.926139] vxfs: unable to read disk superblock at 8 [ 289.934931] vxfs: can't find superblock. [ 289.936533] vxfs: unable to read disk superblock at 8 23:44:17 executing program 0: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) [ 289.946239] vxfs: can't find superblock. [ 289.955275] vxfs: can't find superblock. 23:44:17 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:17 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:17 executing program 1: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}]}) 23:44:17 executing program 5: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:17 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:18 executing program 0: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:18 executing program 5: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) [ 290.243492] vxfs: WRONG superblock magic 00000000 at 1 [ 290.243515] vxfs: WRONG superblock magic 00000000 at 1 [ 290.253523] vxfs: unable to read disk superblock at 8 [ 290.270314] vxfs: can't find superblock. [ 290.283350] vxfs: unable to read disk superblock at 8 [ 290.289600] vxfs: can't find superblock. 23:44:18 executing program 1: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}]}) 23:44:18 executing program 0: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:18 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)) 23:44:18 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:18 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)) 23:44:18 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:18 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) [ 290.531922] vxfs: WRONG superblock magic 00000000 at 1 23:44:18 executing program 5: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:18 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)) 23:44:18 executing program 1: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}]}) [ 290.587009] vxfs: unable to read disk superblock at 8 [ 290.602587] vxfs: can't find superblock. [ 290.695326] vxfs: WRONG superblock magic 00000000 at 1 23:44:18 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) [ 290.715881] vxfs: unable to read disk superblock at 8 [ 290.731786] vxfs: can't find superblock. 23:44:18 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:18 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:18 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:18 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}]}) 23:44:18 executing program 2: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) [ 290.882515] vxfs: WRONG superblock magic 00000000 at 1 [ 290.888998] vxfs: WRONG superblock magic 00000000 at 8 [ 290.899538] vxfs: can't find superblock. 23:44:18 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:18 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) [ 290.980247] vxfs: WRONG superblock magic 00000000 at 1 [ 290.995671] vxfs: unable to read disk superblock at 8 [ 291.045757] vxfs: can't find superblock. 23:44:18 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 23:44:18 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:19 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)) 23:44:19 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 23:44:19 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}]}) 23:44:19 executing program 3: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:19 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)) 23:44:19 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 23:44:19 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}]}) 23:44:19 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:19 executing program 3: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:19 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 23:44:19 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)) 23:44:19 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}]}) 23:44:19 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) 23:44:19 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)) 23:44:19 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}]}) 23:44:19 executing program 3: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:19 executing program 4: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:19 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}]}) 23:44:19 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)) 23:44:19 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:19 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:19 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) [ 291.717911] vxfs: WRONG superblock magic 00000000 at 1 [ 291.731355] vxfs: WRONG superblock magic 00000000 at 8 [ 291.743373] vxfs: can't find superblock. 23:44:19 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)) 23:44:19 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}]}) 23:44:19 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) 23:44:19 executing program 4: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:19 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:19 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:19 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) [ 292.039240] vxfs: WRONG superblock magic 00000000 at 1 [ 292.061487] vxfs: WRONG superblock magic 00000000 at 8 [ 292.075254] vxfs: WRONG superblock magic 00000000 at 1 [ 292.110174] vxfs: can't find superblock. [ 292.118261] vxfs: WRONG superblock magic 00000000 at 8 23:44:20 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 292.150629] vxfs: can't find superblock. 23:44:20 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 23:44:20 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 23:44:20 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 23:44:20 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}]}) 23:44:20 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)) 23:44:20 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 23:44:20 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:20 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 23:44:20 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 292.478151] vxfs: WRONG superblock magic 00000000 at 1 [ 292.483695] vxfs: WRONG superblock magic 00000000 at 8 [ 292.490520] vxfs: can't find superblock. 23:44:20 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:20 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:20 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 23:44:20 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 23:44:20 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 23:44:20 executing program 2: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:20 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:20 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 23:44:20 executing program 4: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)) 23:44:20 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:20 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) 23:44:20 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) [ 293.006444] vxfs: WRONG superblock magic 00000000 at 1 [ 293.020954] vxfs: WRONG superblock magic 00000000 at 8 [ 293.030256] vxfs: can't find superblock. 23:44:20 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) 23:44:20 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 23:44:21 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 23:44:21 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 293.188955] vxfs: WRONG superblock magic 00000000 at 1 [ 293.197380] vxfs: unable to read disk superblock at 8 [ 293.202702] vxfs: can't find superblock. [ 293.256350] vxfs: WRONG superblock magic 00000000 at 1 23:44:21 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 293.305570] vxfs: WRONG superblock magic 00000000 at 8 23:44:21 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) [ 293.346308] vxfs: can't find superblock. 23:44:21 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 23:44:21 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:21 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 293.446752] vxfs: WRONG superblock magic 00000000 at 1 [ 293.447765] vxfs: WRONG superblock magic 00000000 at 1 [ 293.465173] vxfs: unable to read disk superblock at 8 [ 293.473602] vxfs: WRONG superblock magic 00000000 at 8 [ 293.489714] vxfs: can't find superblock. [ 293.509419] vxfs: can't find superblock. 23:44:21 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 23:44:21 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 23:44:21 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) [ 293.600057] vxfs: WRONG superblock magic 00000000 at 1 [ 293.609435] vxfs: WRONG superblock magic 00000000 at 1 [ 293.616031] vxfs: unable to read disk superblock at 8 [ 293.624982] vxfs: unable to read disk superblock at 8 [ 293.632712] vxfs: can't find superblock. [ 293.638849] vxfs: can't find superblock. 23:44:21 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 23:44:21 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 293.762216] print_req_error: 23 callbacks suppressed [ 293.762222] print_req_error: I/O error, dev loop1, sector 0 [ 293.773525] buffer_io_error: 12 callbacks suppressed [ 293.773532] Buffer I/O error on dev loop1, logical block 0, async page read [ 293.786719] print_req_error: I/O error, dev loop1, sector 4 [ 293.792442] Buffer I/O error on dev loop1, logical block 2, async page read [ 293.799852] print_req_error: I/O error, dev loop1, sector 6 [ 293.805569] Buffer I/O error on dev loop1, logical block 3, async page read 23:44:21 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:21 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}]}) 23:44:21 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) 23:44:21 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:21 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) [ 293.992744] vxfs: WRONG superblock magic 00000000 at 1 [ 294.007626] vxfs: WRONG superblock magic 00000000 at 8 [ 294.013045] vxfs: can't find superblock. [ 294.097185] vxfs: WRONG superblock magic 00000000 at 1 [ 294.122164] vxfs: unable to read disk superblock at 8 [ 294.129988] vxfs: WRONG superblock magic 00000000 at 1 [ 294.132527] vxfs: WRONG superblock magic 00000000 at 1 [ 294.135473] vxfs: unable to read disk superblock at 8 23:44:22 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) 23:44:22 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:22 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) [ 294.164896] vxfs: can't find superblock. [ 294.175150] vxfs: WRONG superblock magic 00000000 at 8 [ 294.180245] vxfs: can't find superblock. [ 294.195939] vxfs: can't find superblock. 23:44:22 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:22 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 294.327829] vxfs: WRONG superblock magic 00000000 at 1 [ 294.335589] vxfs: WRONG superblock magic 00000000 at 8 [ 294.365960] vxfs: can't find superblock. [ 294.370304] vxfs: WRONG superblock magic 00000000 at 1 23:44:22 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 294.385928] vxfs: WRONG superblock magic 00000000 at 8 [ 294.391445] vxfs: can't find superblock. 23:44:22 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) [ 294.440814] vxfs: WRONG superblock magic 00000000 at 1 [ 294.446344] vxfs: unable to read disk superblock at 8 [ 294.459129] vxfs: can't find superblock. 23:44:22 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:22 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) [ 294.550413] vxfs: WRONG superblock magic 00000000 at 1 [ 294.567120] vxfs: unable to read disk superblock at 8 [ 294.586495] vxfs: can't find superblock. 23:44:22 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) 23:44:22 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:22 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) [ 294.712828] vxfs: WRONG superblock magic 00000000 at 1 [ 294.725943] vxfs: WRONG superblock magic 00000000 at 8 [ 294.748117] vxfs: can't find superblock. [ 294.780817] vxfs: WRONG superblock magic 00000000 at 1 [ 294.783391] vxfs: WRONG superblock magic 00000000 at 1 [ 294.791969] vxfs: WRONG superblock magic 00000000 at 8 [ 294.808800] vxfs: can't find superblock. [ 294.815638] vxfs: WRONG superblock magic 00000000 at 8 23:44:22 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 294.837748] vxfs: can't find superblock. 23:44:22 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 294.867578] vxfs: WRONG superblock magic 00000000 at 1 [ 294.873196] vxfs: WRONG superblock magic 00000000 at 8 [ 294.878868] vxfs: can't find superblock. 23:44:22 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) 23:44:22 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) [ 294.980196] print_req_error: I/O error, dev loop0, sector 0 23:44:22 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:22 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 295.065083] vxfs: WRONG superblock magic 00000000 at 1 [ 295.083480] vxfs: WRONG superblock magic 00000000 at 8 23:44:23 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, 0x0) [ 295.126223] vxfs: can't find superblock. [ 295.136771] vxfs: WRONG superblock magic 00000000 at 1 [ 295.145000] vxfs: WRONG superblock magic 00000000 at 8 [ 295.151546] vxfs: can't find superblock. [ 295.208833] vxfs: WRONG superblock magic 00000000 at 1 [ 295.215658] vxfs: WRONG superblock magic 00000000 at 8 [ 295.228102] vxfs: can't find superblock. 23:44:23 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:23 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:23 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:23 executing program 0: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 295.283344] vxfs: WRONG superblock magic 00000000 at 1 [ 295.290005] vxfs: WRONG superblock magic 00000000 at 8 [ 295.311426] vxfs: can't find superblock. 23:44:23 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:23 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 295.400393] vxfs: WRONG superblock magic 00000000 at 1 [ 295.424247] vxfs: unable to read disk superblock at 8 [ 295.442847] vxfs: can't find superblock. [ 295.480276] vxfs: WRONG superblock magic 00000000 at 1 [ 295.480320] vxfs: WRONG superblock magic 00000000 at 1 [ 295.491541] vxfs: WRONG superblock magic 00000000 at 8 [ 295.496319] vxfs: WRONG superblock magic 00000000 at 8 [ 295.502387] vxfs: WRONG superblock magic 00000000 at 1 [ 295.510509] print_req_error: I/O error, dev loop5, sector 0 [ 295.516434] Buffer I/O error on dev loop5, logical block 0, async page read [ 295.527873] print_req_error: I/O error, dev loop5, sector 4 [ 295.533603] Buffer I/O error on dev loop5, logical block 2, async page read [ 295.541067] print_req_error: I/O error, dev loop5, sector 6 [ 295.546875] Buffer I/O error on dev loop5, logical block 3, async page read [ 295.563986] vxfs: WRONG superblock magic 00000000 at 8 23:44:23 executing program 5: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 295.585201] vxfs: can't find superblock. [ 295.591621] vxfs: can't find superblock. [ 295.593572] vxfs: can't find superblock. 23:44:23 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:23 executing program 1: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:23 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 295.700149] vxfs: WRONG superblock magic 00000000 at 1 [ 295.709537] vxfs: WRONG superblock magic 00000000 at 1 [ 295.716146] vxfs: WRONG superblock magic 00000000 at 8 [ 295.722980] vxfs: can't find superblock. [ 295.728223] vxfs: unable to read disk superblock at 8 [ 295.737210] vxfs: can't find superblock. 23:44:23 executing program 4: syz_mount_image$vxfs(&(0x7f0000000400), 0x0, 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:23 executing program 3: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:23 executing program 0: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 295.786456] vxfs: WRONG superblock magic 00000000 at 1 [ 295.788082] vxfs: WRONG superblock magic 00000000 at 1 [ 295.807462] vxfs: WRONG superblock magic 00000000 at 8 [ 295.820283] vxfs: can't find superblock. [ 295.829894] vxfs: unable to read disk superblock at 8 [ 295.838593] vxfs: can't find superblock. 23:44:23 executing program 2: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:23 executing program 1: socket$igmp(0x2, 0x3, 0x2) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 295.950654] vxfs: WRONG superblock magic 00000000 at 1 [ 295.956723] vxfs: WRONG superblock magic 00000000 at 8 [ 295.962075] vxfs: can't find superblock. 23:44:23 executing program 5: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:23 executing program 0: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:23 executing program 3: socket$igmp(0x2, 0x3, 0x2) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:24 executing program 4: syz_mount_image$vxfs(0x0, &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 296.179488] vxfs: WRONG superblock magic 00000000 at 1 [ 296.185050] vxfs: unable to read disk superblock at 8 [ 296.185668] vxfs: WRONG superblock magic 00000000 at 1 [ 296.204003] vxfs: WRONG superblock magic 00000000 at 1 [ 296.210259] vxfs: unable to read disk superblock at 8 [ 296.217094] vxfs: can't find superblock. [ 296.227714] print_req_error: I/O error, dev loop3, sector 0 [ 296.246606] vxfs: can't find superblock. [ 296.247324] vxfs: unable to read disk superblock at 8 23:44:24 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 296.309791] vxfs: can't find superblock. 23:44:24 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:24 executing program 2: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) [ 296.452369] vxfs: WRONG superblock magic 00000000 at 1 [ 296.460107] vxfs: unable to read disk superblock at 8 [ 296.481478] vxfs: can't find superblock. [ 296.503599] vxfs: WRONG superblock magic 00000000 at 1 23:44:24 executing program 2: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) [ 296.532556] vxfs: unable to read disk superblock at 8 23:44:24 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) 23:44:24 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:24 executing program 2: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0), 0x4800) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 296.555459] vxfs: WRONG superblock magic 00000000 at 1 [ 296.565874] vxfs: can't find superblock. [ 296.573135] vxfs: unable to read disk superblock at 8 [ 296.582670] vxfs: can't find superblock. 23:44:24 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0), 0x4800) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:24 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:24 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) [ 296.761441] print_req_error: I/O error, dev loop0, sector 0 [ 296.766863] print_req_error: I/O error, dev loop4, sector 0 23:44:24 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r2) 23:44:24 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) [ 296.861458] vxfs: WRONG superblock magic 00000000 at 1 [ 296.874625] vxfs: WRONG superblock magic 00000000 at 1 [ 296.881927] vxfs: unable to read disk superblock at 8 [ 296.891098] vxfs: WRONG superblock magic 00000000 at 1 [ 296.902707] vxfs: unable to read disk superblock at 8 23:44:24 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 296.905259] vxfs: can't find superblock. [ 296.914547] vxfs: unable to read disk superblock at 8 [ 296.937241] vxfs: can't find superblock. 23:44:24 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) [ 296.967108] Buffer I/O error on dev loop2, logical block 0, async page read [ 296.974309] Buffer I/O error on dev loop2, logical block 2, async page read [ 296.982477] Buffer I/O error on dev loop2, logical block 3, async page read [ 296.991140] vxfs: can't find superblock. 23:44:24 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0), 0x4800) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:24 executing program 2: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:24 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:24 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) [ 297.121230] vxfs: WRONG superblock magic 00000000 at 1 [ 297.156541] vxfs: unable to read disk superblock at 8 23:44:25 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) [ 297.207105] vxfs: can't find superblock. [ 297.232540] vxfs: WRONG superblock magic 00000000 at 1 [ 297.243769] vxfs: WRONG superblock magic 00000000 at 1 [ 297.253460] vxfs: WRONG superblock magic 00000000 at 1 [ 297.262307] vxfs: unable to read disk superblock at 8 [ 297.269741] vxfs: WRONG superblock magic 00000000 at 1 23:44:25 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) [ 297.294948] vxfs: unable to read disk superblock at 8 [ 297.296166] vxfs: unable to read disk superblock at 8 [ 297.308169] vxfs: can't find superblock. [ 297.320561] vxfs: can't find superblock. [ 297.324819] vxfs: unable to read disk superblock at 8 [ 297.331027] vxfs: can't find superblock. [ 297.335227] vxfs: WRONG superblock magic 00000000 at 1 [ 297.337726] vxfs: can't find superblock. [ 297.360875] vxfs: unable to read disk superblock at 8 23:44:25 executing program 2: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) [ 297.390827] vxfs: can't find superblock. 23:44:25 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0), 0x4800) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:25 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) 23:44:25 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) 23:44:25 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) keyctl$search(0xa, r5, &(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, r6) add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) [ 297.490906] vxfs: WRONG superblock magic 00000000 at 1 [ 297.499174] vxfs: unable to read disk superblock at 8 [ 297.535073] vxfs: can't find superblock. 23:44:25 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, r0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x50, 'perf_event'}, {0x2b, 'rdma'}]}, 0x12) keyctl$unlink(0x9, r0, r0) socketpair(0x27, 0x6, 0xc0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9f) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r5, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, r6) r7 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x1, r0) keyctl$search(0xa, r5, &(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, r6) add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) [ 297.567291] vxfs: WRONG superblock magic 00000000 at 1 [ 297.568173] vxfs: WRONG superblock magic 00000000 at 1 [ 297.595214] vxfs: WRONG superblock magic 00000000 at 1 [ 297.607040] vxfs: unable to read disk superblock at 8 23:44:25 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0) [ 297.615115] vxfs: unable to read disk superblock at 8 [ 297.622192] vxfs: can't find superblock. [ 297.627110] vxfs: can't find superblock. [ 297.659759] vxfs: WRONG superblock magic 00000000 at 1 23:44:25 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x2c000004) 23:44:25 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x2c000004) [ 297.690617] vxfs: unable to read disk superblock at 8 23:44:25 executing program 3: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x2c000004) 23:44:25 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x2c000004) [ 297.716144] vxfs: unable to read disk superblock at 8 [ 297.725748] vxfs: can't find superblock. [ 297.746906] vxfs: can't find superblock. [ 297.763303] vxfs: WRONG superblock magic 00000000 at 1 [ 297.767577] vxfs: WRONG superblock magic 00000000 at 1 [ 297.769017] vxfs: WRONG superblock magic 00000000 at 1 [ 297.775801] vxfs: unable to read disk superblock at 8 [ 297.797378] vxfs: can't find superblock. [ 297.799733] vxfs: unable to read disk superblock at 8 23:44:25 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0), 0x4800) 23:44:25 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 1) [ 297.812560] vxfs: WRONG superblock magic 00000000 at 1 [ 297.824554] vxfs: unable to read disk superblock at 8 [ 297.849252] vxfs: unable to read disk superblock at 8 [ 297.853067] Buffer I/O error on dev loop3, logical block 0, async page read 23:44:25 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 1) [ 297.865055] vxfs: can't find superblock. [ 297.870904] vxfs: can't find superblock. [ 297.875290] vxfs: can't find superblock. [ 297.888565] FAULT_INJECTION: forcing a failure. [ 297.888565] name failslab, interval 1, probability 0, space 0, times 1 23:44:25 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) [ 297.966511] FAULT_INJECTION: forcing a failure. [ 297.966511] name failslab, interval 1, probability 0, space 0, times 1 [ 297.996230] CPU: 1 PID: 11309 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 298.004147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.013508] Call Trace: [ 298.016100] dump_stack+0x1b2/0x281 [ 298.019734] should_fail.cold+0x10a/0x149 [ 298.023891] should_failslab+0xd6/0x130 [ 298.027868] __kmalloc+0x2c1/0x400 [ 298.031411] ? SyS_memfd_create+0xbc/0x3c0 [ 298.035647] SyS_memfd_create+0xbc/0x3c0 [ 298.039824] ? shmem_fcntl+0x120/0x120 [ 298.043702] ? __do_page_fault+0x159/0xad0 [ 298.047934] ? do_syscall_64+0x4c/0x640 [ 298.051909] ? shmem_fcntl+0x120/0x120 [ 298.055798] do_syscall_64+0x1d5/0x640 [ 298.059697] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 298.064872] RIP: 0033:0x7fdc42061109 [ 298.068572] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 298.076280] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc42061109 [ 298.083633] RDX: 00007fdc409d5fe0 RSI: 0000000000000000 RDI: 00007fdc420ba1be [ 298.090899] RBP: 0000000000000000 R08: 00007fdc409d5fd8 R09: 00007fdc409d61d0 [ 298.098163] R10: 00007fdc409d5fdc R11: 0000000000000246 R12: 0000000020000400 [ 298.105427] R13: 0000000020000440 R14: 0000000000000000 R15: 0000000020000580 23:44:25 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 23:44:25 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x2c000004) 23:44:25 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x2c000004) [ 298.114262] CPU: 0 PID: 11319 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 298.122164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.131515] Call Trace: [ 298.134102] dump_stack+0x1b2/0x281 [ 298.137734] should_fail.cold+0x10a/0x149 [ 298.141884] should_failslab+0xd6/0x130 [ 298.145859] __kmalloc+0x2c1/0x400 [ 298.149396] ? SyS_memfd_create+0xbc/0x3c0 [ 298.153632] SyS_memfd_create+0xbc/0x3c0 [ 298.157694] ? shmem_fcntl+0x120/0x120 [ 298.161586] ? __do_page_fault+0x159/0xad0 23:44:26 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x2c000004) 23:44:26 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) 23:44:26 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 298.165816] ? do_syscall_64+0x4c/0x640 [ 298.169784] ? shmem_fcntl+0x120/0x120 [ 298.173672] do_syscall_64+0x1d5/0x640 [ 298.177574] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 298.182761] RIP: 0033:0x7f8777d7b109 [ 298.186464] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 298.194165] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7b109 [ 298.201431] RDX: 00007f87766effe0 RSI: 0000000000000000 RDI: 00007f8777dd41be [ 298.208708] RBP: 0000000000000000 R08: 00007f87766effd8 R09: 00007f87766f01d0 23:44:26 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) 23:44:26 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 2) [ 298.216062] R10: 00007f87766effdc R11: 0000000000000246 R12: 0000000020000400 [ 298.223328] R13: 0000000020000440 R14: 0000000000000000 R15: 0000000020000580 23:44:26 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) [ 298.258749] vxfs: WRONG superblock magic 00000000 at 1 [ 298.264345] vxfs: WRONG superblock magic 00000000 at 1 [ 298.272041] vxfs: unable to read disk superblock at 8 [ 298.279841] vxfs: unable to read disk superblock at 8 [ 298.297423] FAULT_INJECTION: forcing a failure. [ 298.297423] name failslab, interval 1, probability 0, space 0, times 0 [ 298.311280] vxfs: can't find superblock. [ 298.319596] vxfs: can't find superblock. [ 298.327338] vxfs: WRONG superblock magic 00000000 at 1 [ 298.339492] vxfs: unable to read disk superblock at 8 [ 298.353142] CPU: 1 PID: 11342 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 23:44:26 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) [ 298.361045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.370395] Call Trace: [ 298.371448] vxfs: can't find superblock. [ 298.372980] dump_stack+0x1b2/0x281 [ 298.372994] should_fail.cold+0x10a/0x149 [ 298.373007] should_failslab+0xd6/0x130 [ 298.373019] kmem_cache_alloc+0x28e/0x3c0 [ 298.373031] __d_alloc+0x2a/0xa20 [ 298.373041] ? lock_downgrade+0x740/0x740 [ 298.373053] __shmem_file_setup.part.0+0xcb/0x3c0 [ 298.373061] ? shmem_create+0x30/0x30 [ 298.373067] ? __alloc_fd+0x1be/0x490 [ 298.373080] SyS_memfd_create+0x1fc/0x3c0 [ 298.373089] ? shmem_fcntl+0x120/0x120 [ 298.373100] ? __do_page_fault+0x159/0xad0 [ 298.373112] ? do_syscall_64+0x4c/0x640 [ 298.429000] ? shmem_fcntl+0x120/0x120 [ 298.432880] do_syscall_64+0x1d5/0x640 [ 298.436750] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 298.441918] RIP: 0033:0x7fdc42061109 [ 298.445604] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 298.453304] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc42061109 23:44:26 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 2) 23:44:26 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x2c000004) 23:44:26 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 3) [ 298.460551] RDX: 00007fdc409d5fe0 RSI: 0000000000000000 RDI: 00007fdc420ba1be [ 298.467805] RBP: 0000000000000000 R08: 00007fdc409d5fd8 R09: 00007fdc409d61d0 [ 298.475060] R10: 00007fdc409d5fdc R11: 0000000000000246 R12: 0000000020000400 [ 298.482315] R13: 0000000020000440 R14: 0000000000000000 R15: 0000000020000580 [ 298.530448] FAULT_INJECTION: forcing a failure. [ 298.530448] name failslab, interval 1, probability 0, space 0, times 0 [ 298.548859] CPU: 1 PID: 11361 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 298.556773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.565381] FAULT_INJECTION: forcing a failure. [ 298.565381] name failslab, interval 1, probability 0, space 0, times 0 [ 298.566119] Call Trace: [ 298.566133] dump_stack+0x1b2/0x281 [ 298.566146] should_fail.cold+0x10a/0x149 [ 298.566160] should_failslab+0xd6/0x130 [ 298.566172] kmem_cache_alloc+0x28e/0x3c0 [ 298.566181] ? shmem_destroy_callback+0xa0/0xa0 [ 298.566194] shmem_alloc_inode+0x18/0x40 [ 298.566207] ? shmem_destroy_callback+0xa0/0xa0 [ 298.609213] alloc_inode+0x5d/0x170 [ 298.612844] new_inode+0x1d/0xf0 [ 298.616215] shmem_get_inode+0x8b/0x890 [ 298.620198] __shmem_file_setup.part.0+0x104/0x3c0 [ 298.625129] ? shmem_create+0x30/0x30 [ 298.628922] ? __alloc_fd+0x1be/0x490 [ 298.632721] SyS_memfd_create+0x1fc/0x3c0 [ 298.636866] ? shmem_fcntl+0x120/0x120 [ 298.640748] ? __do_page_fault+0x159/0xad0 [ 298.644979] ? do_syscall_64+0x4c/0x640 [ 298.648951] ? shmem_fcntl+0x120/0x120 [ 298.652838] do_syscall_64+0x1d5/0x640 [ 298.656727] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 298.661917] RIP: 0033:0x7fdc42061109 [ 298.665622] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 298.673327] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc42061109 23:44:26 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x2c000004) 23:44:26 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) 23:44:26 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x2c000004) 23:44:26 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 4) [ 298.678752] vxfs: WRONG superblock magic 00000000 at 1 [ 298.680589] RDX: 00007fdc409d5fe0 RSI: 0000000000000000 RDI: 00007fdc420ba1be [ 298.680595] RBP: 0000000000000000 R08: 00007fdc409d5fd8 R09: 00007fdc409d61d0 [ 298.680601] R10: 00007fdc409d5fdc R11: 0000000000000246 R12: 0000000020000400 [ 298.680607] R13: 0000000020000440 R14: 0000000000000000 R15: 0000000020000580 23:44:26 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) 23:44:26 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) [ 298.751599] CPU: 0 PID: 11364 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 298.759516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.767331] FAULT_INJECTION: forcing a failure. [ 298.767331] name failslab, interval 1, probability 0, space 0, times 0 [ 298.768861] Call Trace: [ 298.768876] dump_stack+0x1b2/0x281 [ 298.768892] should_fail.cold+0x10a/0x149 [ 298.768905] should_failslab+0xd6/0x130 [ 298.768922] kmem_cache_alloc+0x28e/0x3c0 23:44:26 executing program 0: socket$igmp(0x2, 0x3, 0x2) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) [ 298.798721] __d_alloc+0x2a/0xa20 [ 298.802178] ? lock_downgrade+0x740/0x740 [ 298.806325] __shmem_file_setup.part.0+0xcb/0x3c0 [ 298.811186] ? shmem_create+0x30/0x30 [ 298.814983] ? __alloc_fd+0x1be/0x490 [ 298.818785] SyS_memfd_create+0x1fc/0x3c0 [ 298.822924] ? shmem_fcntl+0x120/0x120 [ 298.826802] ? __do_page_fault+0x159/0xad0 [ 298.831031] ? do_syscall_64+0x4c/0x640 [ 298.835001] ? shmem_fcntl+0x120/0x120 [ 298.838875] do_syscall_64+0x1d5/0x640 [ 298.842754] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 298.847934] RIP: 0033:0x7f8777d7b109 23:44:26 executing program 0: syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) 23:44:26 executing program 0: syz_open_dev$vcsn(0x0, 0x1, 0x200000) [ 298.851635] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 298.859336] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7b109 [ 298.866595] RDX: 00007f87766effe0 RSI: 0000000000000000 RDI: 00007f8777dd41be [ 298.873856] RBP: 0000000000000000 R08: 00007f87766effd8 R09: 00007f87766f01d0 [ 298.881118] R10: 00007f87766effdc R11: 0000000000000246 R12: 0000000020000400 [ 298.888386] R13: 0000000020000440 R14: 0000000000000000 R15: 0000000020000580 [ 298.895659] CPU: 1 PID: 11378 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 298.903548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.912898] Call Trace: [ 298.915490] dump_stack+0x1b2/0x281 [ 298.919124] should_fail.cold+0x10a/0x149 [ 298.923276] should_failslab+0xd6/0x130 [ 298.927254] kmem_cache_alloc+0x28e/0x3c0 [ 298.931405] get_empty_filp+0x86/0x3f0 [ 298.935306] alloc_file+0x23/0x440 [ 298.938853] __shmem_file_setup.part.0+0x198/0x3c0 [ 298.943781] ? shmem_create+0x30/0x30 [ 298.947578] ? __alloc_fd+0x1be/0x490 [ 298.951385] SyS_memfd_create+0x1fc/0x3c0 [ 298.955538] ? shmem_fcntl+0x120/0x120 [ 298.959421] ? __do_page_fault+0x159/0xad0 [ 298.963654] ? do_syscall_64+0x4c/0x640 [ 298.967629] ? shmem_fcntl+0x120/0x120 [ 298.971060] vxfs: unable to read disk superblock at 8 [ 298.971509] do_syscall_64+0x1d5/0x640 [ 298.977436] vxfs: can't find superblock. [ 298.980571] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 298.980579] RIP: 0033:0x7fdc42061109 [ 298.980586] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 23:44:26 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 3) [ 299.001193] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc42061109 [ 299.005731] vxfs: WRONG superblock magic 00000000 at 1 [ 299.008461] RDX: 00007fdc409d5fe0 RSI: 0000000000000000 RDI: 00007fdc420ba1be [ 299.008467] RBP: 0000000000000000 R08: 00007fdc409d5fd8 R09: 00007fdc409d61d0 [ 299.008472] R10: 00007fdc409d5fdc R11: 0000000000000246 R12: 0000000020000400 [ 299.008476] R13: 0000000020000440 R14: 0000000000000000 R15: 0000000020000580 [ 299.046486] vxfs: WRONG superblock magic 00000000 at 1 [ 299.052163] vxfs: unable to read disk superblock at 8 23:44:26 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) 23:44:26 executing program 0: syz_open_dev$vcsn(0x0, 0x1, 0x200000) [ 299.073587] FAULT_INJECTION: forcing a failure. [ 299.073587] name failslab, interval 1, probability 0, space 0, times 0 [ 299.094110] vxfs: can't find superblock. [ 299.111079] CPU: 0 PID: 11402 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 299.119029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.128556] Call Trace: [ 299.131149] dump_stack+0x1b2/0x281 [ 299.134799] should_fail.cold+0x10a/0x149 [ 299.138954] should_failslab+0xd6/0x130 [ 299.142930] kmem_cache_alloc+0x28e/0x3c0 [ 299.147077] ? shmem_destroy_callback+0xa0/0xa0 [ 299.151773] shmem_alloc_inode+0x18/0x40 [ 299.155831] ? shmem_destroy_callback+0xa0/0xa0 [ 299.155961] vxfs: WRONG superblock magic 00000000 at 1 [ 299.160493] alloc_inode+0x5d/0x170 [ 299.160503] new_inode+0x1d/0xf0 [ 299.160513] shmem_get_inode+0x8b/0x890 [ 299.160534] __shmem_file_setup.part.0+0x104/0x3c0 [ 299.160544] ? shmem_create+0x30/0x30 [ 299.160552] ? __alloc_fd+0x1be/0x490 [ 299.160566] SyS_memfd_create+0x1fc/0x3c0 [ 299.160575] ? shmem_fcntl+0x120/0x120 [ 299.166048] vxfs: unable to read disk superblock at 8 [ 299.169453] ? __do_page_fault+0x159/0xad0 [ 299.169464] ? do_syscall_64+0x4c/0x640 [ 299.169472] ? shmem_fcntl+0x120/0x120 [ 299.169481] do_syscall_64+0x1d5/0x640 [ 299.169497] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 299.169506] RIP: 0033:0x7f8777d7b109 [ 299.169511] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 299.169559] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7b109 [ 299.186552] vxfs: can't find superblock. [ 299.189349] RDX: 00007f87766effe0 RSI: 0000000000000000 RDI: 00007f8777dd41be [ 299.189356] RBP: 0000000000000000 R08: 00007f87766effd8 R09: 00007f87766f01d0 [ 299.189361] R10: 00007f87766effdc R11: 0000000000000246 R12: 0000000020000400 [ 299.189365] R13: 0000000020000440 R14: 0000000000000000 R15: 0000000020000580 [ 299.211586] vxfs: unable to read disk superblock at 8 [ 299.281699] vxfs: can't find superblock. 23:44:27 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) 23:44:27 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 5) 23:44:27 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) 23:44:27 executing program 0: syz_open_dev$vcsn(0x0, 0x1, 0x200000) 23:44:27 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:27 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 4) [ 299.353913] FAULT_INJECTION: forcing a failure. [ 299.353913] name failslab, interval 1, probability 0, space 0, times 0 [ 299.372977] CPU: 0 PID: 11422 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 299.380887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.383741] vxfs: WRONG superblock magic 00000000 at 1 [ 299.390236] Call Trace: [ 299.390254] dump_stack+0x1b2/0x281 [ 299.390269] should_fail.cold+0x10a/0x149 [ 299.390281] should_failslab+0xd6/0x130 [ 299.390292] kmem_cache_alloc_trace+0x29a/0x3d0 [ 299.390308] apparmor_file_alloc_security+0x129/0x800 [ 299.400147] vxfs: unable to read disk superblock at 8 [ 299.401765] security_file_alloc+0x66/0xa0 [ 299.401775] ? selinux_is_enabled+0x5/0x50 [ 299.401790] get_empty_filp+0x16b/0x3f0 [ 299.407089] vxfs: can't find superblock. [ 299.409879] alloc_file+0x23/0x440 [ 299.409895] __shmem_file_setup.part.0+0x198/0x3c0 [ 299.409903] ? shmem_create+0x30/0x30 [ 299.409913] ? __alloc_fd+0x1be/0x490 [ 299.434937] FAULT_INJECTION: forcing a failure. [ 299.434937] name failslab, interval 1, probability 0, space 0, times 0 [ 299.437580] SyS_memfd_create+0x1fc/0x3c0 [ 299.437591] ? shmem_fcntl+0x120/0x120 [ 299.437601] ? __do_page_fault+0x159/0xad0 [ 299.437610] ? do_syscall_64+0x4c/0x640 [ 299.437617] ? shmem_fcntl+0x120/0x120 [ 299.437629] do_syscall_64+0x1d5/0x640 [ 299.492755] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 299.497928] RIP: 0033:0x7fdc42061109 [ 299.501623] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 299.509309] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc42061109 [ 299.516561] RDX: 00007fdc409d5fe0 RSI: 0000000000000000 RDI: 00007fdc420ba1be [ 299.523812] RBP: 0000000000000000 R08: 00007fdc409d5fd8 R09: 00007fdc409d61d0 [ 299.531059] R10: 00007fdc409d5fdc R11: 0000000000000246 R12: 0000000020000400 [ 299.538312] R13: 0000000020000440 R14: 0000000000000000 R15: 0000000020000580 [ 299.545594] CPU: 1 PID: 11432 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 299.553477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.562829] Call Trace: [ 299.565414] dump_stack+0x1b2/0x281 [ 299.569041] should_fail.cold+0x10a/0x149 [ 299.571600] vxfs: WRONG superblock magic 00000000 at 1 [ 299.573187] should_failslab+0xd6/0x130 [ 299.573199] kmem_cache_alloc+0x28e/0x3c0 [ 299.573211] get_empty_filp+0x86/0x3f0 [ 299.578654] vxfs: unable to read disk superblock at 8 [ 299.582495] alloc_file+0x23/0x440 [ 299.582510] __shmem_file_setup.part.0+0x198/0x3c0 [ 299.582520] ? shmem_create+0x30/0x30 [ 299.586730] vxfs: can't find superblock. [ 299.590509] ? __alloc_fd+0x1be/0x490 [ 299.590526] SyS_memfd_create+0x1fc/0x3c0 [ 299.590536] ? shmem_fcntl+0x120/0x120 [ 299.603434] print_req_error: 9 callbacks suppressed [ 299.603440] print_req_error: I/O error, dev loop4, sector 0 [ 299.604136] ? __do_page_fault+0x159/0xad0 [ 299.638629] ? do_syscall_64+0x4c/0x640 [ 299.642584] ? shmem_fcntl+0x120/0x120 [ 299.646450] do_syscall_64+0x1d5/0x640 23:44:27 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 6) 23:44:27 executing program 0: syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x200000) [ 299.650326] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 299.655496] RIP: 0033:0x7f8777d7b109 [ 299.659184] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 299.666869] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7b109 [ 299.674118] RDX: 00007f87766effe0 RSI: 0000000000000000 RDI: 00007f8777dd41be [ 299.681366] RBP: 0000000000000000 R08: 00007f87766effd8 R09: 00007f87766f01d0 [ 299.688625] R10: 00007f87766effdc R11: 0000000000000246 R12: 0000000020000400 [ 299.695874] R13: 0000000020000440 R14: 0000000000000000 R15: 0000000020000580 [ 299.727148] print_req_error: I/O error, dev loop1, sector 0 [ 299.732942] buffer_io_error: 5 callbacks suppressed [ 299.732947] Buffer I/O error on dev loop1, logical block 0, async page read [ 299.745998] print_req_error: I/O error, dev loop1, sector 4 [ 299.747135] print_req_error: I/O error, dev loop5, sector 0 [ 299.751987] Buffer I/O error on dev loop1, logical block 2, async page read [ 299.757504] Buffer I/O error on dev loop5, logical block 0, async page read [ 299.764582] print_req_error: I/O error, dev loop1, sector 6 23:44:27 executing program 0: syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x200000) 23:44:27 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:27 executing program 0: syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x200000) [ 299.774858] print_req_error: I/O error, dev loop5, sector 4 [ 299.777463] Buffer I/O error on dev loop1, logical block 3, async page read [ 299.790360] Buffer I/O error on dev loop5, logical block 2, async page read [ 299.802995] print_req_error: I/O error, dev loop5, sector 6 [ 299.809171] Buffer I/O error on dev loop5, logical block 3, async page read [ 299.816945] print_req_error: I/O error, dev loop5, sector 0 23:44:27 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 299.822665] Buffer I/O error on dev loop5, logical block 0, async page read [ 299.829742] FAULT_INJECTION: forcing a failure. [ 299.829742] name failslab, interval 1, probability 0, space 0, times 0 [ 299.830152] print_req_error: I/O error, dev loop5, sector 4 [ 299.846830] Buffer I/O error on dev loop5, logical block 2, async page read [ 299.853961] print_req_error: I/O error, dev loop5, sector 6 [ 299.860285] Buffer I/O error on dev loop5, logical block 3, async page read 23:44:27 executing program 0: syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x0) [ 299.872258] Buffer I/O error on dev loop5, logical block 0, async page read [ 299.881999] vxfs: WRONG superblock magic 00000000 at 1 [ 299.896321] vxfs: unable to read disk superblock at 8 [ 299.909213] vxfs: can't find superblock. [ 299.909727] vxfs: WRONG superblock magic 00000000 at 1 [ 299.914437] CPU: 0 PID: 11456 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 299.920206] vxfs: unable to read disk superblock at 8 [ 299.926491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.926496] Call Trace: [ 299.926512] dump_stack+0x1b2/0x281 [ 299.926528] should_fail.cold+0x10a/0x149 [ 299.926543] should_failslab+0xd6/0x130 [ 299.926554] kmem_cache_alloc+0x28e/0x3c0 [ 299.926565] getname_flags+0xc8/0x550 [ 299.926577] do_sys_open+0x1ce/0x410 [ 299.926586] ? filp_open+0x60/0x60 [ 299.926598] ? do_syscall_64+0x4c/0x640 23:44:27 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) [ 299.926607] ? SyS_open+0x30/0x30 [ 299.931945] vxfs: can't find superblock. [ 299.941147] do_syscall_64+0x1d5/0x640 [ 299.941168] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 299.941177] RIP: 0033:0x7fdc42014024 [ 299.941182] RSP: 002b:00007fdc409d5eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 299.941193] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42014024 [ 299.941198] RDX: 0000000000000002 RSI: 00007fdc409d5fe0 RDI: 00000000ffffff9c [ 299.941202] RBP: 00007fdc409d5fe0 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 299.941206] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 299.941210] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 299.995543] vxfs: WRONG superblock magic 00000000 at 1 [ 300.048133] vxfs: unable to read disk superblock at 8 [ 300.053330] vxfs: can't find superblock. 23:44:27 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:27 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 7) 23:44:27 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 5) 23:44:27 executing program 0: syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x0) 23:44:27 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:27 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) [ 300.164089] FAULT_INJECTION: forcing a failure. [ 300.164089] name failslab, interval 1, probability 0, space 0, times 0 [ 300.179673] FAULT_INJECTION: forcing a failure. [ 300.179673] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 300.179684] CPU: 0 PID: 11489 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 300.179691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.179694] Call Trace: [ 300.179708] dump_stack+0x1b2/0x281 [ 300.179722] should_fail.cold+0x10a/0x149 [ 300.179737] __alloc_pages_nodemask+0x22c/0x2720 [ 300.179749] ? static_obj+0x50/0x50 [ 300.179759] ? trace_hardirqs_on+0x10/0x10 [ 300.179771] ? __lock_acquire+0x5fc/0x3f20 [ 300.179787] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 300.179797] ? __lock_acquire+0x5fc/0x3f20 [ 300.179807] ? simple_xattr_get+0xe5/0x160 [ 300.179822] ? fsnotify+0x974/0x11b0 [ 300.179831] ? shmem_setattr+0x241/0xbf0 [ 300.179846] ? __fsnotify_inode_delete+0x20/0x20 [ 300.179860] cache_grow_begin+0x91/0x700 [ 300.179869] ? fs_reclaim_release+0xd0/0x110 [ 300.179880] ? check_preemption_disabled+0x35/0x240 [ 300.179893] cache_alloc_refill+0x273/0x350 [ 300.179908] kmem_cache_alloc+0x333/0x3c0 [ 300.179920] getname_flags+0xc8/0x550 [ 300.179932] do_sys_open+0x1ce/0x410 [ 300.179943] ? filp_open+0x60/0x60 [ 300.179954] ? do_syscall_64+0x4c/0x640 [ 300.179962] ? SyS_open+0x30/0x30 [ 300.179973] do_syscall_64+0x1d5/0x640 [ 300.179988] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 300.179995] RIP: 0033:0x7fdc42014024 [ 300.180000] RSP: 002b:00007fdc409d5eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 300.180010] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42014024 [ 300.180016] RDX: 0000000000000002 RSI: 00007fdc409d5fe0 RDI: 00000000ffffff9c [ 300.180022] RBP: 00007fdc409d5fe0 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 300.180027] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 300.180032] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 300.186291] vxfs: WRONG superblock magic 00000000 at 1 [ 300.203988] vxfs: WRONG superblock magic 00000000 at 1 [ 300.212930] CPU: 0 PID: 11485 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 300.242937] vxfs: unable to read disk superblock at 8 [ 300.244550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.244555] Call Trace: [ 300.244571] dump_stack+0x1b2/0x281 [ 300.244587] should_fail.cold+0x10a/0x149 [ 300.272082] vxfs: can't find superblock. [ 300.273979] should_failslab+0xd6/0x130 23:44:28 executing program 0: syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x0) 23:44:28 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) [ 300.273994] kmem_cache_alloc_trace+0x29a/0x3d0 [ 300.274007] apparmor_file_alloc_security+0x129/0x800 [ 300.287793] vxfs: WRONG superblock magic 00000000 at 1 [ 300.291241] security_file_alloc+0x66/0xa0 [ 300.291252] ? selinux_is_enabled+0x5/0x50 [ 300.291264] get_empty_filp+0x16b/0x3f0 [ 300.291275] alloc_file+0x23/0x440 [ 300.295151] vxfs: unable to read disk superblock at 8 [ 300.298514] __shmem_file_setup.part.0+0x198/0x3c0 [ 300.298523] ? shmem_create+0x30/0x30 [ 300.298531] ? __alloc_fd+0x1be/0x490 23:44:28 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0), 0x4800) 23:44:28 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) [ 300.298548] SyS_memfd_create+0x1fc/0x3c0 [ 300.298557] ? shmem_fcntl+0x120/0x120 [ 300.298568] ? __do_page_fault+0x159/0xad0 [ 300.298576] ? do_syscall_64+0x4c/0x640 [ 300.298582] ? shmem_fcntl+0x120/0x120 [ 300.298592] do_syscall_64+0x1d5/0x640 [ 300.302658] vxfs: can't find superblock. [ 300.306001] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 300.306010] RIP: 0033:0x7f8777d7b109 [ 300.306015] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 300.306025] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7b109 23:44:28 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 23:44:28 executing program 0: syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x0) 23:44:28 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) [ 300.306030] RDX: 00007f87766effe0 RSI: 0000000000000000 RDI: 00007f8777dd41be [ 300.306035] RBP: 0000000000000000 R08: 00007f87766effd8 R09: 00007f87766f01d0 [ 300.306040] R10: 00007f87766effdc R11: 0000000000000246 R12: 0000000020000400 [ 300.306045] R13: 0000000020000440 R14: 0000000000000000 R15: 0000000020000580 [ 300.337451] vxfs: WRONG superblock magic 00000000 at 8 23:44:28 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 8) 23:44:28 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) 23:44:28 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r3 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) 23:44:28 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 6) 23:44:28 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) [ 300.609680] vxfs: can't find superblock. [ 300.613307] vxfs: WRONG superblock magic 00000000 at 1 [ 300.620676] vxfs: unable to read disk superblock at 8 [ 300.628163] vxfs: can't find superblock. 23:44:28 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 300.680236] FAULT_INJECTION: forcing a failure. [ 300.680236] name failslab, interval 1, probability 0, space 0, times 0 [ 300.696913] vxfs: WRONG superblock magic 00000000 at 1 [ 300.710613] vxfs: unable to read disk superblock at 8 [ 300.715828] vxfs: can't find superblock. [ 300.716405] FAULT_INJECTION: forcing a failure. [ 300.716405] name failslab, interval 1, probability 0, space 0, times 0 [ 300.731822] CPU: 1 PID: 11539 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 300.739726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.749110] Call Trace: [ 300.751703] dump_stack+0x1b2/0x281 [ 300.755338] should_fail.cold+0x10a/0x149 [ 300.759493] should_failslab+0xd6/0x130 [ 300.763472] kmem_cache_alloc+0x28e/0x3c0 [ 300.767640] getname_flags+0xc8/0x550 [ 300.771451] do_sys_open+0x1ce/0x410 [ 300.775169] ? filp_open+0x60/0x60 [ 300.778721] ? do_syscall_64+0x4c/0x640 [ 300.782697] ? SyS_open+0x30/0x30 [ 300.786156] do_syscall_64+0x1d5/0x640 [ 300.790045] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 300.795230] RIP: 0033:0x7f8777d2e024 [ 300.798929] RSP: 002b:00007f87766efeb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 300.806635] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d2e024 [ 300.813901] RDX: 0000000000000002 RSI: 00007f87766effe0 RDI: 00000000ffffff9c [ 300.821172] RBP: 00007f87766effe0 R08: 0000000000000000 R09: 00007f87766f01d0 23:44:28 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) 23:44:28 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) 23:44:28 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) 23:44:28 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) 23:44:28 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) 23:44:28 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0), 0x4800) [ 300.828433] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 300.835702] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 300.850536] CPU: 0 PID: 11543 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 300.858457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.867810] Call Trace: [ 300.870401] dump_stack+0x1b2/0x281 [ 300.874035] should_fail.cold+0x10a/0x149 [ 300.878189] should_failslab+0xd6/0x130 [ 300.882167] kmem_cache_alloc+0x28e/0x3c0 [ 300.886331] get_empty_filp+0x86/0x3f0 [ 300.890307] path_openat+0x84/0x2970 [ 300.894028] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 300.898874] ? path_lookupat+0x780/0x780 [ 300.902935] ? trace_hardirqs_on+0x10/0x10 [ 300.907168] ? fsnotify+0x974/0x11b0 [ 300.910884] ? shmem_setattr+0x241/0xbf0 [ 300.914950] do_filp_open+0x179/0x3c0 [ 300.918759] ? may_open_dev+0xe0/0xe0 [ 300.922556] ? __alloc_fd+0x1be/0x490 [ 300.926361] ? lock_downgrade+0x740/0x740 [ 300.930512] ? do_raw_spin_unlock+0x164/0x220 [ 300.935010] ? _raw_spin_unlock+0x29/0x40 [ 300.939161] ? __alloc_fd+0x1be/0x490 [ 300.942972] do_sys_open+0x296/0x410 [ 300.946686] ? filp_open+0x60/0x60 [ 300.950231] ? do_syscall_64+0x4c/0x640 [ 300.954205] ? SyS_open+0x30/0x30 [ 300.957661] do_syscall_64+0x1d5/0x640 [ 300.961559] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 300.966752] RIP: 0033:0x7fdc42014024 [ 300.970461] RSP: 002b:00007fdc409d5eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 23:44:28 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 9) 23:44:28 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) [ 300.978260] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42014024 [ 300.985529] RDX: 0000000000000002 RSI: 00007fdc409d5fe0 RDI: 00000000ffffff9c [ 300.992801] RBP: 00007fdc409d5fe0 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 301.000078] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 301.007350] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 23:44:28 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0), 0x4800) 23:44:28 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 7) 23:44:28 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0), 0x4800) 23:44:28 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) 23:44:28 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) [ 301.075879] FAULT_INJECTION: forcing a failure. [ 301.075879] name failslab, interval 1, probability 0, space 0, times 0 [ 301.110093] CPU: 1 PID: 11579 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 301.114707] FAULT_INJECTION: forcing a failure. [ 301.114707] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 301.118014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.139146] Call Trace: [ 301.141737] dump_stack+0x1b2/0x281 [ 301.145347] should_fail.cold+0x10a/0x149 [ 301.149483] should_failslab+0xd6/0x130 [ 301.153442] kmem_cache_alloc_trace+0x29a/0x3d0 [ 301.158097] apparmor_file_alloc_security+0x129/0x800 [ 301.163270] security_file_alloc+0x66/0xa0 [ 301.167500] ? selinux_is_enabled+0x5/0x50 [ 301.171729] get_empty_filp+0x16b/0x3f0 [ 301.175699] path_openat+0x84/0x2970 [ 301.179399] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 301.184223] ? path_lookupat+0x780/0x780 [ 301.188264] ? trace_hardirqs_on+0x10/0x10 [ 301.192493] ? fsnotify+0x974/0x11b0 [ 301.196275] ? shmem_setattr+0x241/0xbf0 [ 301.200321] do_filp_open+0x179/0x3c0 [ 301.204111] ? may_open_dev+0xe0/0xe0 [ 301.207901] ? __alloc_fd+0x1be/0x490 [ 301.211693] ? lock_downgrade+0x740/0x740 [ 301.215830] ? do_raw_spin_unlock+0x164/0x220 [ 301.220320] ? _raw_spin_unlock+0x29/0x40 [ 301.224460] ? __alloc_fd+0x1be/0x490 [ 301.228246] do_sys_open+0x296/0x410 [ 301.231946] ? filp_open+0x60/0x60 [ 301.235512] ? do_syscall_64+0x4c/0x640 [ 301.239469] ? SyS_open+0x30/0x30 [ 301.243006] do_syscall_64+0x1d5/0x640 [ 301.247763] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 301.252930] RIP: 0033:0x7fdc42014024 [ 301.256624] RSP: 002b:00007fdc409d5eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 301.264323] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42014024 [ 301.271573] RDX: 0000000000000002 RSI: 00007fdc409d5fe0 RDI: 00000000ffffff9c [ 301.278995] RBP: 00007fdc409d5fe0 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 301.286252] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 301.293502] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 301.300766] CPU: 0 PID: 11589 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 301.308649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.317997] Call Trace: [ 301.320595] dump_stack+0x1b2/0x281 23:44:29 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 23:44:29 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) [ 301.324225] should_fail.cold+0x10a/0x149 [ 301.328378] __alloc_pages_nodemask+0x22c/0x2720 [ 301.333136] ? static_obj+0x50/0x50 [ 301.336800] ? trace_hardirqs_on+0x10/0x10 [ 301.341048] ? __lock_acquire+0x5fc/0x3f20 [ 301.345293] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 301.350139] ? __lock_acquire+0x5fc/0x3f20 [ 301.354372] ? simple_xattr_get+0xe5/0x160 [ 301.358612] ? fsnotify+0x974/0x11b0 [ 301.362329] ? shmem_setattr+0x241/0xbf0 [ 301.366395] ? __fsnotify_inode_delete+0x20/0x20 [ 301.371155] cache_grow_begin+0x91/0x700 23:44:29 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 301.375229] ? fs_reclaim_release+0xd0/0x110 [ 301.379639] ? check_preemption_disabled+0x35/0x240 [ 301.384660] cache_alloc_refill+0x273/0x350 [ 301.388989] kmem_cache_alloc+0x333/0x3c0 [ 301.393146] getname_flags+0xc8/0x550 [ 301.396949] do_sys_open+0x1ce/0x410 [ 301.400662] ? filp_open+0x60/0x60 [ 301.404202] ? do_syscall_64+0x4c/0x640 [ 301.408177] ? SyS_open+0x30/0x30 [ 301.411632] do_syscall_64+0x1d5/0x640 [ 301.415522] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 301.420709] RIP: 0033:0x7f8777d2e024 23:44:29 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) 23:44:29 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 10) 23:44:29 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) 23:44:29 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) 23:44:29 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) [ 301.424415] RSP: 002b:00007f87766efeb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 301.432127] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d2e024 [ 301.439395] RDX: 0000000000000002 RSI: 00007f87766effe0 RDI: 00000000ffffff9c [ 301.446668] RBP: 00007f87766effe0 R08: 0000000000000000 R09: 00007f87766f01d0 [ 301.453932] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 301.461200] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 301.496271] vxfs: WRONG superblock magic 00000000 at 1 [ 301.502093] vxfs: WRONG superblock magic 00000000 at 8 [ 301.508086] vxfs: can't find superblock. 23:44:29 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 8) 23:44:29 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) 23:44:29 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) 23:44:29 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 23:44:29 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) 23:44:29 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) [ 301.546524] FAULT_INJECTION: forcing a failure. [ 301.546524] name failslab, interval 1, probability 0, space 0, times 0 [ 301.598322] CPU: 1 PID: 11614 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 301.599564] FAULT_INJECTION: forcing a failure. [ 301.599564] name failslab, interval 1, probability 0, space 0, times 0 [ 301.606235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.606272] Call Trace: [ 301.606290] dump_stack+0x1b2/0x281 [ 301.606304] should_fail.cold+0x10a/0x149 [ 301.606318] should_failslab+0xd6/0x130 [ 301.606332] kmem_cache_alloc_trace+0x29a/0x3d0 [ 301.606344] ? loop_get_status64+0x100/0x100 [ 301.606355] __kthread_create_on_node+0xbe/0x3a0 [ 301.606363] ? kthread_park+0x130/0x130 [ 301.606381] ? loop_get_status64+0x100/0x100 [ 301.606389] kthread_create_on_node+0xa8/0xd0 [ 301.606402] ? __kthread_create_on_node+0x3a0/0x3a0 [ 301.672779] ? __lockdep_init_map+0x100/0x560 [ 301.677264] ? __lockdep_init_map+0x100/0x560 [ 301.681748] lo_ioctl+0xcd9/0x1cd0 [ 301.685271] ? loop_set_status64+0xe0/0xe0 [ 301.689489] blkdev_ioctl+0x540/0x1830 [ 301.693358] ? blkpg_ioctl+0x8d0/0x8d0 [ 301.697231] ? trace_hardirqs_on+0x10/0x10 [ 301.701456] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 301.706555] ? debug_check_no_obj_freed+0x2c0/0x680 [ 301.711556] block_ioctl+0xd9/0x120 [ 301.715164] ? blkdev_fallocate+0x3a0/0x3a0 [ 301.719468] do_vfs_ioctl+0x75a/0xff0 [ 301.723251] ? lock_acquire+0x170/0x3f0 [ 301.727212] ? ioctl_preallocate+0x1a0/0x1a0 [ 301.731602] ? __fget+0x265/0x3e0 [ 301.735038] ? do_vfs_ioctl+0xff0/0xff0 [ 301.739000] ? security_file_ioctl+0x83/0xb0 [ 301.743421] SyS_ioctl+0x7f/0xb0 [ 301.746786] ? do_vfs_ioctl+0xff0/0xff0 [ 301.750760] do_syscall_64+0x1d5/0x640 [ 301.754677] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 301.759858] RIP: 0033:0x7fdc42060ec7 [ 301.763563] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.771263] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 301.778528] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 301.785795] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 23:44:29 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) 23:44:29 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) [ 301.793060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 301.800333] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 301.807955] CPU: 0 PID: 11623 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 301.815852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.825550] Call Trace: [ 301.828144] dump_stack+0x1b2/0x281 [ 301.831777] should_fail.cold+0x10a/0x149 [ 301.835932] should_failslab+0xd6/0x130 [ 301.839919] kmem_cache_alloc+0x28e/0x3c0 [ 301.844077] get_empty_filp+0x86/0x3f0 [ 301.847973] path_openat+0x84/0x2970 [ 301.851689] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 301.856533] ? path_lookupat+0x780/0x780 [ 301.860600] ? trace_hardirqs_on+0x10/0x10 [ 301.864839] ? fsnotify+0x974/0x11b0 [ 301.867272] FAULT_INJECTION: forcing a failure. [ 301.867272] name failslab, interval 1, probability 0, space 0, times 0 [ 301.868546] ? shmem_setattr+0x241/0xbf0 [ 301.868566] do_filp_open+0x179/0x3c0 [ 301.868575] ? may_open_dev+0xe0/0xe0 [ 301.868590] ? __alloc_fd+0x1be/0x490 [ 301.895185] ? lock_downgrade+0x740/0x740 [ 301.899333] ? do_raw_spin_unlock+0x164/0x220 [ 301.903814] ? _raw_spin_unlock+0x29/0x40 [ 301.907945] ? __alloc_fd+0x1be/0x490 [ 301.911731] do_sys_open+0x296/0x410 [ 301.915434] ? filp_open+0x60/0x60 [ 301.918961] ? do_syscall_64+0x4c/0x640 [ 301.922915] ? SyS_open+0x30/0x30 [ 301.926351] do_syscall_64+0x1d5/0x640 [ 301.930227] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 301.935405] RIP: 0033:0x7f8777d2e024 [ 301.939095] RSP: 002b:00007f87766efeb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 23:44:29 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 11) 23:44:29 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) 23:44:29 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 23:44:29 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) 23:44:29 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) [ 301.946780] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d2e024 [ 301.954037] RDX: 0000000000000002 RSI: 00007f87766effe0 RDI: 00000000ffffff9c [ 301.961288] RBP: 00007f87766effe0 R08: 0000000000000000 R09: 00007f87766f01d0 [ 301.968567] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 301.975821] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 301.983100] CPU: 1 PID: 11637 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 301.991001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.000345] Call Trace: [ 302.002935] dump_stack+0x1b2/0x281 [ 302.006915] should_fail.cold+0x10a/0x149 [ 302.011072] should_failslab+0xd6/0x130 [ 302.015049] kmem_cache_alloc+0x28e/0x3c0 [ 302.019197] __kernfs_new_node+0x6f/0x470 [ 302.023350] kernfs_create_dir_ns+0x8c/0x200 [ 302.027777] internal_create_group+0xe9/0x710 [ 302.032302] lo_ioctl+0x1137/0x1cd0 [ 302.035934] ? loop_set_status64+0xe0/0xe0 [ 302.040169] blkdev_ioctl+0x540/0x1830 [ 302.044092] ? blkpg_ioctl+0x8d0/0x8d0 [ 302.047980] ? trace_hardirqs_on+0x10/0x10 [ 302.052225] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 302.057424] ? debug_check_no_obj_freed+0x2c0/0x680 [ 302.062448] block_ioctl+0xd9/0x120 [ 302.066081] ? blkdev_fallocate+0x3a0/0x3a0 [ 302.070404] do_vfs_ioctl+0x75a/0xff0 [ 302.074206] ? lock_acquire+0x170/0x3f0 [ 302.078183] ? ioctl_preallocate+0x1a0/0x1a0 [ 302.082595] ? __fget+0x265/0x3e0 [ 302.086055] ? do_vfs_ioctl+0xff0/0xff0 [ 302.090034] ? security_file_ioctl+0x83/0xb0 [ 302.094444] SyS_ioctl+0x7f/0xb0 [ 302.097808] ? do_vfs_ioctl+0xff0/0xff0 [ 302.101779] do_syscall_64+0x1d5/0x640 [ 302.105675] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 302.110869] RIP: 0033:0x7fdc42060ec7 [ 302.114576] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.122327] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 302.129598] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 302.136872] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 23:44:30 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 9) 23:44:30 executing program 1: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) 23:44:30 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) 23:44:30 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) 23:44:30 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) [ 302.144144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 302.151413] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 302.211721] FAULT_INJECTION: forcing a failure. [ 302.211721] name failslab, interval 1, probability 0, space 0, times 0 [ 302.224877] CPU: 1 PID: 11663 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 302.232776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.242136] Call Trace: [ 302.244732] dump_stack+0x1b2/0x281 [ 302.248444] should_fail.cold+0x10a/0x149 [ 302.252602] should_failslab+0xd6/0x130 [ 302.256579] kmem_cache_alloc_trace+0x29a/0x3d0 23:44:30 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) [ 302.261257] apparmor_file_alloc_security+0x129/0x800 [ 302.266456] security_file_alloc+0x66/0xa0 [ 302.270690] ? selinux_is_enabled+0x5/0x50 [ 302.274924] get_empty_filp+0x16b/0x3f0 [ 302.278904] path_openat+0x84/0x2970 [ 302.282648] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 302.287495] ? path_lookupat+0x780/0x780 [ 302.291553] ? trace_hardirqs_on+0x10/0x10 [ 302.295786] ? fsnotify+0x974/0x11b0 [ 302.299502] ? shmem_setattr+0x241/0xbf0 [ 302.303570] do_filp_open+0x179/0x3c0 [ 302.307804] ? may_open_dev+0xe0/0xe0 23:44:30 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) [ 302.311606] ? __alloc_fd+0x1be/0x490 [ 302.315411] ? lock_downgrade+0x740/0x740 [ 302.319559] ? do_raw_spin_unlock+0x164/0x220 [ 302.324053] ? _raw_spin_unlock+0x29/0x40 [ 302.328198] ? __alloc_fd+0x1be/0x490 [ 302.332006] do_sys_open+0x296/0x410 [ 302.335728] ? filp_open+0x60/0x60 [ 302.339266] ? do_syscall_64+0x4c/0x640 [ 302.343237] ? SyS_open+0x30/0x30 [ 302.346688] do_syscall_64+0x1d5/0x640 [ 302.350589] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 302.355769] RIP: 0033:0x7f8777d2e024 [ 302.359472] RSP: 002b:00007f87766efeb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 302.367179] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d2e024 [ 302.374446] RDX: 0000000000000002 RSI: 00007f87766effe0 RDI: 00000000ffffff9c [ 302.381741] RBP: 00007f87766effe0 R08: 0000000000000000 R09: 00007f87766f01d0 [ 302.389007] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 302.396274] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 302.401702] vxfs: WRONG superblock magic 00000000 at 1 23:44:30 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 12) 23:44:30 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) 23:44:30 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) 23:44:30 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 23:44:30 executing program 1: socket$igmp(0x2, 0x3, 0x2) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) 23:44:30 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 10) [ 302.422395] vxfs: WRONG superblock magic 00000000 at 8 [ 302.433029] vxfs: can't find superblock. 23:44:30 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) 23:44:30 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 23:44:30 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) 23:44:30 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) [ 302.511427] FAULT_INJECTION: forcing a failure. [ 302.511427] name failslab, interval 1, probability 0, space 0, times 0 [ 302.543077] FAULT_INJECTION: forcing a failure. [ 302.543077] name failslab, interval 1, probability 0, space 0, times 0 23:44:30 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) 23:44:30 executing program 1: r0 = syz_open_dev$vcsn(0x0, 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) [ 302.554699] CPU: 1 PID: 11698 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 302.562582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.571930] Call Trace: [ 302.574522] dump_stack+0x1b2/0x281 [ 302.578156] should_fail.cold+0x10a/0x149 [ 302.582310] should_failslab+0xd6/0x130 [ 302.586298] kmem_cache_alloc+0x40/0x3c0 [ 302.590360] radix_tree_node_alloc.constprop.0+0x1b0/0x2f0 [ 302.595988] idr_get_free_cmn+0x595/0x8d0 [ 302.600164] ? trace_hardirqs_on+0x10/0x10 [ 302.604429] idr_alloc_cmn+0xe8/0x1e0 [ 302.608230] ? __fprop_inc_percpu_max+0x1d0/0x1d0 [ 302.613070] ? cpuacct_charge+0x1cf/0x350 [ 302.617243] ? fs_reclaim_release+0xd0/0x110 [ 302.621648] idr_alloc_cyclic+0xc2/0x1d0 [ 302.625703] ? idr_alloc_cmn+0x1e0/0x1e0 [ 302.629757] ? __radix_tree_preload+0x1c3/0x250 [ 302.634430] __kernfs_new_node+0xaf/0x470 [ 302.638574] kernfs_create_dir_ns+0x8c/0x200 [ 302.642968] internal_create_group+0xe9/0x710 [ 302.647452] lo_ioctl+0x1137/0x1cd0 [ 302.651063] ? loop_set_status64+0xe0/0xe0 [ 302.655281] blkdev_ioctl+0x540/0x1830 [ 302.659160] ? blkpg_ioctl+0x8d0/0x8d0 [ 302.663040] ? trace_hardirqs_on+0x10/0x10 [ 302.667266] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 302.672362] ? debug_check_no_obj_freed+0x2c0/0x680 [ 302.677385] block_ioctl+0xd9/0x120 [ 302.681008] ? blkdev_fallocate+0x3a0/0x3a0 [ 302.685317] do_vfs_ioctl+0x75a/0xff0 [ 302.689107] ? lock_acquire+0x170/0x3f0 [ 302.693071] ? ioctl_preallocate+0x1a0/0x1a0 [ 302.697468] ? __fget+0x265/0x3e0 [ 302.700906] ? do_vfs_ioctl+0xff0/0xff0 [ 302.704866] ? security_file_ioctl+0x83/0xb0 [ 302.709281] SyS_ioctl+0x7f/0xb0 [ 302.712637] ? do_vfs_ioctl+0xff0/0xff0 [ 302.716601] do_syscall_64+0x1d5/0x640 [ 302.720478] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 302.725653] RIP: 0033:0x7fdc42060ec7 [ 302.729350] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.737054] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 302.744318] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 302.751589] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 302.758857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 302.766124] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 302.773403] CPU: 0 PID: 11695 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 302.781328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.790765] Call Trace: [ 302.792390] vxfs: WRONG superblock magic 00000000 at 1 [ 302.793346] dump_stack+0x1b2/0x281 [ 302.793361] should_fail.cold+0x10a/0x149 [ 302.798896] vxfs: WRONG superblock magic 00000000 at 8 [ 302.802252] should_failslab+0xd6/0x130 [ 302.802265] kmem_cache_alloc_trace+0x29a/0x3d0 [ 302.802277] ? loop_get_status64+0x100/0x100 [ 302.809058] vxfs: can't find superblock. [ 302.811670] __kthread_create_on_node+0xbe/0x3a0 [ 302.811681] ? kthread_park+0x130/0x130 [ 302.837441] ? loop_get_status64+0x100/0x100 [ 302.841850] kthread_create_on_node+0xa8/0xd0 [ 302.846348] ? __kthread_create_on_node+0x3a0/0x3a0 [ 302.851368] ? __lockdep_init_map+0x100/0x560 [ 302.855864] ? __lockdep_init_map+0x100/0x560 [ 302.860360] lo_ioctl+0xcd9/0x1cd0 [ 302.863903] ? loop_set_status64+0xe0/0xe0 [ 302.868140] blkdev_ioctl+0x540/0x1830 [ 302.872036] ? blkpg_ioctl+0x8d0/0x8d0 [ 302.875918] ? trace_hardirqs_on+0x10/0x10 [ 302.880153] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 302.885257] ? debug_check_no_obj_freed+0x2c0/0x680 [ 302.890281] block_ioctl+0xd9/0x120 [ 302.893911] ? blkdev_fallocate+0x3a0/0x3a0 [ 302.898239] do_vfs_ioctl+0x75a/0xff0 [ 302.902040] ? lock_acquire+0x170/0x3f0 [ 302.906010] ? ioctl_preallocate+0x1a0/0x1a0 [ 302.910412] ? __fget+0x265/0x3e0 [ 302.913849] ? do_vfs_ioctl+0xff0/0xff0 [ 302.917826] ? security_file_ioctl+0x83/0xb0 [ 302.922231] SyS_ioctl+0x7f/0xb0 [ 302.925580] ? do_vfs_ioctl+0xff0/0xff0 [ 302.929535] do_syscall_64+0x1d5/0x640 [ 302.933414] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 302.938581] RIP: 0033:0x7f8777d7aec7 [ 302.942280] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.949970] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 23:44:30 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 13) 23:44:30 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 23:44:30 executing program 1: r0 = syz_open_dev$vcsn(0x0, 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) 23:44:30 executing program 0: socket$igmp(0x2, 0x3, 0x2) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) 23:44:30 executing program 4: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) 23:44:30 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 11) [ 302.957239] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 302.964497] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 302.971751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 302.978998] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 23:44:30 executing program 1: r0 = syz_open_dev$vcsn(0x0, 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) 23:44:30 executing program 0: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) syz_open_dev$vcsn(&(0x7f00000005c0), 0x2f78, 0x480480) 23:44:30 executing program 4: socket$igmp(0x2, 0x3, 0x2) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) 23:44:30 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) [ 303.077657] FAULT_INJECTION: forcing a failure. [ 303.077657] name failslab, interval 1, probability 0, space 0, times 0 [ 303.089013] CPU: 1 PID: 11737 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 303.096891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.106244] Call Trace: [ 303.108831] dump_stack+0x1b2/0x281 [ 303.112463] should_fail.cold+0x10a/0x149 [ 303.116711] should_failslab+0xd6/0x130 [ 303.120685] kmem_cache_alloc+0x40/0x3c0 23:44:30 executing program 4: syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) 23:44:31 executing program 5: socket$igmp(0x2, 0x3, 0x2) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) [ 303.124756] radix_tree_node_alloc.constprop.0+0x1b0/0x2f0 [ 303.130407] idr_get_free_cmn+0x595/0x8d0 [ 303.134559] ? trace_hardirqs_on+0x10/0x10 [ 303.138798] idr_alloc_cmn+0xe8/0x1e0 [ 303.142600] ? __fprop_inc_percpu_max+0x1d0/0x1d0 [ 303.147440] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 303.152459] ? __schedule+0x1450/0x1de0 [ 303.156432] ? cpuacct_charge+0x1cf/0x350 [ 303.160607] ? fs_reclaim_release+0xd0/0x110 [ 303.165014] idr_alloc_cyclic+0xc2/0x1d0 [ 303.169074] ? idr_alloc_cmn+0x1e0/0x1e0 [ 303.173167] ? __radix_tree_preload+0x1c3/0x250 [ 303.177835] __kernfs_new_node+0xaf/0x470 [ 303.181984] kernfs_create_dir_ns+0x8c/0x200 [ 303.186392] internal_create_group+0xe9/0x710 [ 303.190891] lo_ioctl+0x1137/0x1cd0 [ 303.194522] ? loop_set_status64+0xe0/0xe0 [ 303.198760] blkdev_ioctl+0x540/0x1830 [ 303.202644] ? blkpg_ioctl+0x8d0/0x8d0 [ 303.206537] ? trace_hardirqs_on+0x10/0x10 [ 303.210774] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 303.215898] ? debug_check_no_obj_freed+0x2c0/0x680 [ 303.220919] block_ioctl+0xd9/0x120 [ 303.224541] ? blkdev_fallocate+0x3a0/0x3a0 [ 303.228857] do_vfs_ioctl+0x75a/0xff0 [ 303.232656] ? lock_acquire+0x170/0x3f0 [ 303.236626] ? ioctl_preallocate+0x1a0/0x1a0 [ 303.241036] ? __fget+0x265/0x3e0 [ 303.244491] ? do_vfs_ioctl+0xff0/0xff0 [ 303.248459] ? security_file_ioctl+0x83/0xb0 [ 303.252863] SyS_ioctl+0x7f/0xb0 [ 303.256289] ? do_vfs_ioctl+0xff0/0xff0 [ 303.260265] do_syscall_64+0x1d5/0x640 [ 303.264157] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 303.269345] RIP: 0033:0x7fdc42060ec7 [ 303.273043] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.280757] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 303.288008] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 303.295266] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 303.302528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 303.309774] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 303.324991] vxfs: WRONG superblock magic 00000000 at 1 [ 303.330469] FAULT_INJECTION: forcing a failure. [ 303.330469] name failslab, interval 1, probability 0, space 0, times 0 [ 303.348850] vxfs: unable to read disk superblock at 8 [ 303.354370] vxfs: can't find superblock. [ 303.371592] CPU: 0 PID: 11738 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 303.379513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.388871] Call Trace: [ 303.391471] dump_stack+0x1b2/0x281 [ 303.393898] vxfs: WRONG superblock magic 00000000 at 1 [ 303.395101] should_fail.cold+0x10a/0x149 [ 303.395115] should_failslab+0xd6/0x130 [ 303.400650] vxfs: WRONG superblock magic 00000000 at 8 [ 303.404516] kmem_cache_alloc+0x28e/0x3c0 [ 303.404533] __kernfs_new_node+0x6f/0x470 [ 303.412763] vxfs: can't find superblock. [ 303.413763] kernfs_create_dir_ns+0x8c/0x200 [ 303.430478] internal_create_group+0xe9/0x710 [ 303.434987] lo_ioctl+0x1137/0x1cd0 [ 303.438610] ? loop_set_status64+0xe0/0xe0 [ 303.442833] blkdev_ioctl+0x540/0x1830 [ 303.446699] ? blkpg_ioctl+0x8d0/0x8d0 [ 303.450562] ? trace_hardirqs_on+0x10/0x10 [ 303.454789] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 303.459870] ? debug_check_no_obj_freed+0x2c0/0x680 [ 303.464865] block_ioctl+0xd9/0x120 [ 303.468469] ? blkdev_fallocate+0x3a0/0x3a0 [ 303.472766] do_vfs_ioctl+0x75a/0xff0 [ 303.476541] ? lock_acquire+0x170/0x3f0 [ 303.480490] ? ioctl_preallocate+0x1a0/0x1a0 [ 303.484878] ? __fget+0x265/0x3e0 [ 303.488307] ? do_vfs_ioctl+0xff0/0xff0 [ 303.492273] ? security_file_ioctl+0x83/0xb0 [ 303.496672] SyS_ioctl+0x7f/0xb0 [ 303.500015] ? do_vfs_ioctl+0xff0/0xff0 [ 303.503984] do_syscall_64+0x1d5/0x640 [ 303.507854] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 303.513024] RIP: 0033:0x7f8777d7aec7 [ 303.516709] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 23:44:31 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 14) 23:44:31 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) 23:44:31 executing program 4: syz_open_dev$vcsn(0x0, 0x1, 0x200000) 23:44:31 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) [ 303.524407] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 303.531659] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 303.538930] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 303.546181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 303.553443] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 303.563247] vxfs: WRONG superblock magic 00000000 at 1 [ 303.569415] vxfs: WRONG superblock magic 00000000 at 8 [ 303.574795] vxfs: can't find superblock. 23:44:31 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 12) 23:44:31 executing program 0: syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x0) 23:44:31 executing program 4: syz_open_dev$vcsn(0x0, 0x1, 0x200000) 23:44:31 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLINK(r2, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d3ace36dbfdec03a2f9608255f45938b6168e4e31a407a46f590f8634042ab242edfaa954392368977cb48b639bb35683ca97974c4af87f3f18f49dd8c7244275dcbc5e1ac7b1d664f840402376382552e1100071e911adfca018e9e7c67ee5b", 0x60) write$P9_RATTACH(r0, &(0x7f00000003c0)={0x14, 0x69, 0x2, {0x20, 0x2, 0x5}}, 0x14) syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="6dff85843d68b170d5722150eeaa62effae190f34099fda5d44e646d372ff7e83ec3ffa4f5fabdad477a02eb7f8d97344b939c6bbcea12df313ee9c1af9cdd72b6b663046625507ec2a2717e9cc60533f4b6b95067b3c007f36ab4b7dc1a2c0702aa0e6c70a929768bb325a9ae9b5b7f1a08b0297651c4bd6be35b4d4c8cd3a90391549391f3f072355a4aaf249b2354dcd7b2df1289306d359d68dcd9817998e696ff14d4c75123c608c2e3c5f187a90e89f6", 0xb3, 0x747}], 0x0, &(0x7f0000000580)={[{'-\xb1!%^\',&(+<'}, {}, {'{^%'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '~'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 23:44:31 executing program 0: syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x200000) 23:44:31 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) [ 303.655754] FAULT_INJECTION: forcing a failure. [ 303.655754] name failslab, interval 1, probability 0, space 0, times 0 [ 303.681176] FAULT_INJECTION: forcing a failure. [ 303.681176] name failslab, interval 1, probability 0, space 0, times 0 [ 303.683289] CPU: 1 PID: 11781 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 23:44:31 executing program 4: syz_open_dev$vcsn(0x0, 0x1, 0x200000) [ 303.700265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.709626] Call Trace: [ 303.712219] dump_stack+0x1b2/0x281 [ 303.715854] should_fail.cold+0x10a/0x149 [ 303.720011] should_failslab+0xd6/0x130 [ 303.723989] kmem_cache_alloc+0x28e/0x3c0 [ 303.728141] __kernfs_new_node+0x6f/0x470 [ 303.732295] kernfs_new_node+0x7b/0xe0 [ 303.736186] __kernfs_create_file+0x3d/0x320 [ 303.740597] sysfs_add_file_mode_ns+0x1e1/0x450 [ 303.745271] ? kernfs_create_dir_ns+0x171/0x200 [ 303.749946] internal_create_group+0x22b/0x710 23:44:31 executing program 4: syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x200000) [ 303.754536] lo_ioctl+0x1137/0x1cd0 [ 303.758180] ? loop_set_status64+0xe0/0xe0 [ 303.762516] blkdev_ioctl+0x540/0x1830 [ 303.766409] ? blkpg_ioctl+0x8d0/0x8d0 [ 303.770291] ? trace_hardirqs_on+0x10/0x10 [ 303.774523] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 303.779628] ? debug_check_no_obj_freed+0x2c0/0x680 [ 303.784649] block_ioctl+0xd9/0x120 [ 303.788285] ? blkdev_fallocate+0x3a0/0x3a0 [ 303.792601] do_vfs_ioctl+0x75a/0xff0 [ 303.796399] ? lock_acquire+0x170/0x3f0 [ 303.800402] ? ioctl_preallocate+0x1a0/0x1a0 [ 303.804867] ? __fget+0x265/0x3e0 [ 303.808311] ? do_vfs_ioctl+0xff0/0xff0 [ 303.812399] ? security_file_ioctl+0x83/0xb0 [ 303.816812] SyS_ioctl+0x7f/0xb0 [ 303.820169] ? do_vfs_ioctl+0xff0/0xff0 [ 303.824261] do_syscall_64+0x1d5/0x640 [ 303.828333] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 303.833516] RIP: 0033:0x7f8777d7aec7 [ 303.837220] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.844928] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 303.852195] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 303.859467] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 303.866737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 303.874013] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 303.881296] CPU: 0 PID: 11786 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 303.889191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.898542] Call Trace: [ 303.901131] dump_stack+0x1b2/0x281 [ 303.904773] should_fail.cold+0x10a/0x149 [ 303.908931] should_failslab+0xd6/0x130 [ 303.909475] vxfs: WRONG superblock magic 00000000 at 1 [ 303.912912] kmem_cache_alloc+0x28e/0x3c0 [ 303.912925] __kernfs_new_node+0x6f/0x470 [ 303.912937] kernfs_new_node+0x7b/0xe0 [ 303.918504] vxfs: WRONG superblock magic 00000000 at 8 [ 303.922346] __kernfs_create_file+0x3d/0x320 [ 303.922361] sysfs_add_file_mode_ns+0x1e1/0x450 [ 303.929502] vxfs: can't find superblock. [ 303.930362] ? kernfs_create_dir_ns+0x171/0x200 [ 303.942114] vxfs: WRONG superblock magic 00000000 at 1 [ 303.944708] internal_create_group+0x22b/0x710 [ 303.944724] lo_ioctl+0x1137/0x1cd0 [ 303.948938] vxfs: unable to read disk superblock at 8 [ 303.953442] ? loop_set_status64+0xe0/0xe0 [ 303.953455] blkdev_ioctl+0x540/0x1830 [ 303.953465] ? blkpg_ioctl+0x8d0/0x8d0 [ 303.961337] vxfs: can't find superblock. [ 303.963317] ? trace_hardirqs_on+0x10/0x10 [ 303.963334] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 303.997459] ? debug_check_no_obj_freed+0x2c0/0x680 [ 304.002468] block_ioctl+0xd9/0x120 [ 304.006089] ? blkdev_fallocate+0x3a0/0x3a0 [ 304.010404] do_vfs_ioctl+0x75a/0xff0 [ 304.014190] ? lock_acquire+0x170/0x3f0 [ 304.018147] ? ioctl_preallocate+0x1a0/0x1a0 [ 304.022545] ? __fget+0x265/0x3e0 [ 304.025993] ? do_vfs_ioctl+0xff0/0xff0 [ 304.029956] ? security_file_ioctl+0x83/0xb0 [ 304.034347] SyS_ioctl+0x7f/0xb0 [ 304.037705] ? do_vfs_ioctl+0xff0/0xff0 [ 304.041769] do_syscall_64+0x1d5/0x640 [ 304.045645] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 304.050830] RIP: 0033:0x7fdc42060ec7 [ 304.054518] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.062207] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 304.069457] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 304.076707] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 304.083953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 304.091204] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 304.143726] vxfs: WRONG superblock magic 00000000 at 1 [ 304.161915] vxfs: WRONG superblock magic 00000000 at 8 [ 304.175449] vxfs: can't find superblock. 23:44:32 executing program 4: syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x200000) 23:44:32 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 13) 23:44:32 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 15) 23:44:32 executing program 5: socket$igmp(0x2, 0x3, 0x2) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) 23:44:32 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) 23:44:32 executing program 0: syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x200000) 23:44:32 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) [ 304.272258] FAULT_INJECTION: forcing a failure. [ 304.272258] name failslab, interval 1, probability 0, space 0, times 0 [ 304.283714] CPU: 0 PID: 11828 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 304.291702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.301057] Call Trace: [ 304.303650] dump_stack+0x1b2/0x281 [ 304.307294] should_fail.cold+0x10a/0x149 [ 304.311449] should_failslab+0xd6/0x130 [ 304.315403] kmem_cache_alloc+0x40/0x3c0 [ 304.319450] radix_tree_node_alloc.constprop.0+0x1b0/0x2f0 [ 304.325053] idr_get_free_cmn+0x595/0x8d0 [ 304.329195] ? trace_hardirqs_on+0x10/0x10 [ 304.333410] idr_alloc_cmn+0xe8/0x1e0 [ 304.337191] ? __fprop_inc_percpu_max+0x1d0/0x1d0 [ 304.342010] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 304.347006] ? __schedule+0x1450/0x1de0 [ 304.350971] ? cpuacct_charge+0x1cf/0x350 [ 304.355100] ? fs_reclaim_release+0xd0/0x110 [ 304.359504] idr_alloc_cyclic+0xc2/0x1d0 [ 304.363549] ? idr_alloc_cmn+0x1e0/0x1e0 [ 304.367596] ? __radix_tree_preload+0x1c3/0x250 [ 304.372243] __kernfs_new_node+0xaf/0x470 [ 304.376371] kernfs_create_dir_ns+0x8c/0x200 [ 304.380760] internal_create_group+0xe9/0x710 [ 304.385249] lo_ioctl+0x1137/0x1cd0 [ 304.388855] ? loop_set_status64+0xe0/0xe0 [ 304.393067] blkdev_ioctl+0x540/0x1830 [ 304.396947] ? blkpg_ioctl+0x8d0/0x8d0 [ 304.400811] ? trace_hardirqs_on+0x10/0x10 [ 304.405026] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 304.410108] ? debug_check_no_obj_freed+0x2c0/0x680 [ 304.415122] block_ioctl+0xd9/0x120 [ 304.418743] ? blkdev_fallocate+0x3a0/0x3a0 [ 304.423057] do_vfs_ioctl+0x75a/0xff0 [ 304.426864] ? lock_acquire+0x170/0x3f0 [ 304.430829] ? ioctl_preallocate+0x1a0/0x1a0 [ 304.435229] ? __fget+0x265/0x3e0 [ 304.438658] ? do_vfs_ioctl+0xff0/0xff0 [ 304.442612] ? security_file_ioctl+0x83/0xb0 [ 304.446996] SyS_ioctl+0x7f/0xb0 [ 304.450335] ? do_vfs_ioctl+0xff0/0xff0 [ 304.454285] do_syscall_64+0x1d5/0x640 [ 304.458154] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 304.463327] RIP: 0033:0x7f8777d7aec7 23:44:32 executing program 0: syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x200000) 23:44:32 executing program 4: syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x200000) 23:44:32 executing program 5: socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) pipe2$9p(&(0x7f0000000080), 0x40c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xf, 0x2, {{0x4, 0x0, 0x3}, 0xfffffffb}}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 23:44:32 executing program 0: syz_open_dev$vcsn(0x0, 0x0, 0x200000) 23:44:32 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (fail_nth: 1) [ 304.467014] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.474701] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 304.482187] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 304.489441] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 304.496697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 304.503950] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 23:44:32 executing program 0: syz_open_dev$vcsn(0x0, 0x0, 0x200000) [ 304.579606] vxfs: WRONG superblock magic 00000000 at 1 [ 304.585626] vxfs: WRONG superblock magic 00000000 at 8 [ 304.591363] vxfs: can't find superblock. [ 304.723379] FAULT_INJECTION: forcing a failure. [ 304.723379] name failslab, interval 1, probability 0, space 0, times 0 [ 304.739618] CPU: 0 PID: 11834 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 304.747514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.756853] Call Trace: [ 304.759426] dump_stack+0x1b2/0x281 [ 304.763054] should_fail.cold+0x10a/0x149 [ 304.767184] should_failslab+0xd6/0x130 [ 304.771137] kmem_cache_alloc+0x28e/0x3c0 [ 304.775262] __kernfs_new_node+0x6f/0x470 [ 304.779390] kernfs_new_node+0x7b/0xe0 [ 304.783259] __kernfs_create_file+0x3d/0x320 [ 304.787645] sysfs_add_file_mode_ns+0x1e1/0x450 [ 304.792291] ? kernfs_create_dir_ns+0x171/0x200 [ 304.796936] internal_create_group+0x22b/0x710 [ 304.801511] lo_ioctl+0x1137/0x1cd0 [ 304.805131] ? loop_set_status64+0xe0/0xe0 [ 304.809354] blkdev_ioctl+0x540/0x1830 [ 304.813238] ? blkpg_ioctl+0x8d0/0x8d0 [ 304.817131] ? trace_hardirqs_on+0x10/0x10 [ 304.821375] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 304.826459] ? debug_check_no_obj_freed+0x2c0/0x680 [ 304.831456] block_ioctl+0xd9/0x120 [ 304.835079] ? blkdev_fallocate+0x3a0/0x3a0 [ 304.839399] do_vfs_ioctl+0x75a/0xff0 [ 304.843191] ? lock_acquire+0x170/0x3f0 [ 304.847144] ? ioctl_preallocate+0x1a0/0x1a0 [ 304.851532] ? __fget+0x265/0x3e0 [ 304.854961] ? do_vfs_ioctl+0xff0/0xff0 [ 304.859021] ? security_file_ioctl+0x83/0xb0 [ 304.863422] SyS_ioctl+0x7f/0xb0 [ 304.866778] ? do_vfs_ioctl+0xff0/0xff0 [ 304.870731] do_syscall_64+0x1d5/0x640 [ 304.874598] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 304.879769] RIP: 0033:0x7fdc42060ec7 [ 304.883470] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.891154] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 304.898415] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 304.905662] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 304.912912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 304.920245] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 304.944764] vxfs: WRONG superblock magic 00000000 at 1 [ 304.961713] vxfs: WRONG superblock magic 00000000 at 8 [ 304.971722] vxfs: can't find superblock. 23:44:32 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 16) 23:44:32 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) socketpair(0x2, 0x4, 0x200, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="002000800000ffff00000002431b00cc0067000004049078ac1414aa7f0000010094040000862700000003020a285bab13818e07f307090c41d6eb484b5d000edfdc3e30b5a33436025f5d6c891712ac1e00010a010100e00000027f00000100000000440c2683ac1e0001000000084410a5700000000900000000fffffff8862fffffffff070b6c8c1fa45f298d3d0607121df540bc14f7927b4973a015562d45b1020c5b37342a3eefa9616e4e441c1c43ffffffff00000009640101010000ffff6401010000000004440c2231ac1e0001000000090000"]}) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0700000000000adc000010004e6d013800660000072f9078ac1e0101e00000028660000000010106a019ca62051159dfede234709f4e1eb0ac63282561000c333efee64415a3c8940c020ba52c32580dafc59cf7040d8d749c255114537eab210b071264adb2bd690609687b9560e8cee66e7d020d168c1ce66470e951128001892786e0000001ffffffff7f0000017f00000100000000ac1e010100000000ac1414aaac1414bb891b0cac14143d0a0101027f000001ac1e00010a010101e00000010100444c9c71e00000010000000300000000ffff8000e0000001000007ffffffffff0000009f0000000000000100e000000200000000ac1414aa00000090e000000100001000ac1e010100001df744242b83ac141410000001900000000000000007e0000001000000067f000001000100014408937000000002070706e00000010050b2a3454c"]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x18, 0x4, 0x1000, 0x20, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x10, 0x562a, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x10, 0x20, 0x3, 0x400, {{0x37, 0x4, 0x1, 0x20, 0xdc, 0x67, 0x0, 0x9, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0xa8, [@local, @private=0xa010101, @remote]}, @rr={0x7, 0x1b, 0xdf, [@loopback, @rand_addr=0x64010100, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @timestamp_prespec={0x44, 0x44, 0xbb, 0x3, 0x6, [{@rand_addr=0x64010102, 0x1000}, {@local}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x3f}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x1}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x101}]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x7, 0x4, "1acb"}]}, @timestamp_addr={0x44, 0x24, 0x87, 0x1, 0xd, [{@rand_addr=0x64010100, 0x8e}, {@empty, 0x5}, {@empty, 0x4}, {@rand_addr=0x64010102, 0x5}]}, @timestamp_addr={0x44, 0x24, 0xcb, 0x1, 0x0, [{@multicast1, 0x4}, {@multicast1, 0xf693}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x4}, {@remote, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x1b0, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20008841}, 0x4000000) 23:44:32 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) 23:44:32 executing program 4: syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x0) 23:44:32 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 14) 23:44:32 executing program 0: syz_open_dev$vcsn(0x0, 0x0, 0x200000) 23:44:32 executing program 0: syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x0) 23:44:32 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) (async) socketpair(0x2, 0x4, 0x200, &(0x7f0000000000)={0xffffffffffffffff}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="002000800000ffff00000002431b00cc0067000004049078ac1414aa7f0000010094040000862700000003020a285bab13818e07f307090c41d6eb484b5d000edfdc3e30b5a33436025f5d6c891712ac1e00010a010100e00000027f00000100000000440c2683ac1e0001000000084410a5700000000900000000fffffff8862fffffffff070b6c8c1fa45f298d3d0607121df540bc14f7927b4973a015562d45b1020c5b37342a3eefa9616e4e441c1c43ffffffff00000009640101010000ffff6401010000000004440c2231ac1e0001000000090000"]}) (async) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="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"]}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x18, 0x4, 0x1000, 0x20, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x10, 0x562a, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x10, 0x20, 0x3, 0x400, {{0x37, 0x4, 0x1, 0x20, 0xdc, 0x67, 0x0, 0x9, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0xa8, [@local, @private=0xa010101, @remote]}, @rr={0x7, 0x1b, 0xdf, [@loopback, @rand_addr=0x64010100, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @timestamp_prespec={0x44, 0x44, 0xbb, 0x3, 0x6, [{@rand_addr=0x64010102, 0x1000}, {@local}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x3f}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x1}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x101}]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x7, 0x4, "1acb"}]}, @timestamp_addr={0x44, 0x24, 0x87, 0x1, 0xd, [{@rand_addr=0x64010100, 0x8e}, {@empty, 0x5}, {@empty, 0x4}, {@rand_addr=0x64010102, 0x5}]}, @timestamp_addr={0x44, 0x24, 0xcb, 0x1, 0x0, [{@multicast1, 0x4}, {@multicast1, 0xf693}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x4}, {@remote, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x1b0, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20008841}, 0x4000000) 23:44:32 executing program 4: syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x0) [ 305.094158] FAULT_INJECTION: forcing a failure. [ 305.094158] name failslab, interval 1, probability 0, space 0, times 0 [ 305.111296] CPU: 0 PID: 11879 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 23:44:33 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 17) 23:44:33 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 15) 23:44:33 executing program 0: syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x0) 23:44:33 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) (async, rerun: 32) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) (async, rerun: 32) socketpair(0x2, 0x4, 0x200, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="002000800000ffff00000002431b00cc0067000004049078ac1414aa7f0000010094040000862700000003020a285bab13818e07f307090c41d6eb484b5d000edfdc3e30b5a33436025f5d6c891712ac1e00010a010100e00000027f00000100000000440c2683ac1e0001000000084410a5700000000900000000fffffff8862fffffffff070b6c8c1fa45f298d3d0607121df540bc14f7927b4973a015562d45b1020c5b37342a3eefa9616e4e441c1c43ffffffff00000009640101010000ffff6401010000000004440c2231ac1e0001000000090000"]}) (async) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="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"]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x18, 0x4, 0x1000, 0x20, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x10, 0x562a, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x10, 0x20, 0x3, 0x400, {{0x37, 0x4, 0x1, 0x20, 0xdc, 0x67, 0x0, 0x9, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0xa8, [@local, @private=0xa010101, @remote]}, @rr={0x7, 0x1b, 0xdf, [@loopback, @rand_addr=0x64010100, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @timestamp_prespec={0x44, 0x44, 0xbb, 0x3, 0x6, [{@rand_addr=0x64010102, 0x1000}, {@local}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x3f}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x1}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x101}]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x7, 0x4, "1acb"}]}, @timestamp_addr={0x44, 0x24, 0x87, 0x1, 0xd, [{@rand_addr=0x64010100, 0x8e}, {@empty, 0x5}, {@empty, 0x4}, {@rand_addr=0x64010102, 0x5}]}, @timestamp_addr={0x44, 0x24, 0xcb, 0x1, 0x0, [{@multicast1, 0x4}, {@multicast1, 0xf693}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x4}, {@remote, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x1b0, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20008841}, 0x4000000) [ 305.111303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.111306] Call Trace: [ 305.111322] dump_stack+0x1b2/0x281 23:44:33 executing program 0: syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x0) [ 305.111338] should_fail.cold+0x10a/0x149 [ 305.111351] should_failslab+0xd6/0x130 [ 305.111362] kmem_cache_alloc+0x28e/0x3c0 [ 305.111375] __kernfs_new_node+0x6f/0x470 [ 305.111387] kernfs_new_node+0x7b/0xe0 [ 305.111397] __kernfs_create_file+0x3d/0x320 [ 305.111408] sysfs_add_file_mode_ns+0x1e1/0x450 [ 305.111418] ? kernfs_create_dir_ns+0x171/0x200 [ 305.111429] internal_create_group+0x22b/0x710 [ 305.111444] lo_ioctl+0x1137/0x1cd0 [ 305.111457] ? loop_set_status64+0xe0/0xe0 [ 305.111469] blkdev_ioctl+0x540/0x1830 [ 305.111479] ? blkpg_ioctl+0x8d0/0x8d0 [ 305.111487] ? trace_hardirqs_on+0x10/0x10 [ 305.111500] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 305.111509] ? debug_check_no_obj_freed+0x2c0/0x680 [ 305.111522] block_ioctl+0xd9/0x120 [ 305.111531] ? blkdev_fallocate+0x3a0/0x3a0 [ 305.111541] do_vfs_ioctl+0x75a/0xff0 [ 305.111551] ? lock_acquire+0x170/0x3f0 [ 305.111562] ? ioctl_preallocate+0x1a0/0x1a0 [ 305.111573] ? __fget+0x265/0x3e0 [ 305.111583] ? do_vfs_ioctl+0xff0/0xff0 [ 305.111592] ? security_file_ioctl+0x83/0xb0 [ 305.111602] SyS_ioctl+0x7f/0xb0 [ 305.111608] ? do_vfs_ioctl+0xff0/0xff0 [ 305.111618] do_syscall_64+0x1d5/0x640 [ 305.111632] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 305.111641] RIP: 0033:0x7f8777d7aec7 [ 305.111646] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.111656] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 305.111660] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 305.111666] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 305.111672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 305.111678] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 305.119363] FAULT_INJECTION: forcing a failure. [ 305.119363] name failslab, interval 1, probability 0, space 0, times 0 [ 305.119375] CPU: 1 PID: 11876 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 305.119380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.119384] Call Trace: [ 305.119399] dump_stack+0x1b2/0x281 [ 305.119415] should_fail.cold+0x10a/0x149 [ 305.119428] should_failslab+0xd6/0x130 [ 305.119442] kmem_cache_alloc+0x28e/0x3c0 [ 305.119457] __kernfs_new_node+0x6f/0x470 [ 305.119470] kernfs_new_node+0x7b/0xe0 [ 305.119480] __kernfs_create_file+0x3d/0x320 [ 305.119491] sysfs_add_file_mode_ns+0x1e1/0x450 [ 305.119499] ? kernfs_create_dir_ns+0x171/0x200 [ 305.119510] internal_create_group+0x22b/0x710 [ 305.119524] lo_ioctl+0x1137/0x1cd0 [ 305.119538] ? loop_set_status64+0xe0/0xe0 [ 305.119550] blkdev_ioctl+0x540/0x1830 [ 305.119560] ? blkpg_ioctl+0x8d0/0x8d0 [ 305.119577] ? trace_hardirqs_on+0x10/0x10 [ 305.119592] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 305.119604] ? debug_check_no_obj_freed+0x2c0/0x680 [ 305.119619] block_ioctl+0xd9/0x120 [ 305.119627] ? blkdev_fallocate+0x3a0/0x3a0 [ 305.119636] do_vfs_ioctl+0x75a/0xff0 [ 305.119644] ? lock_acquire+0x170/0x3f0 [ 305.119652] ? ioctl_preallocate+0x1a0/0x1a0 [ 305.119664] ? __fget+0x265/0x3e0 [ 305.119674] ? do_vfs_ioctl+0xff0/0xff0 [ 305.119684] ? security_file_ioctl+0x83/0xb0 [ 305.119694] SyS_ioctl+0x7f/0xb0 [ 305.119702] ? do_vfs_ioctl+0xff0/0xff0 [ 305.119713] do_syscall_64+0x1d5/0x640 [ 305.119727] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 305.119735] RIP: 0033:0x7fdc42060ec7 [ 305.119739] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.119750] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 305.119755] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 305.119761] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 305.119766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 305.119771] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 305.133706] vxfs: WRONG superblock magic 00000000 at 1 [ 305.134791] vxfs: WRONG superblock magic 00000000 at 8 [ 305.134795] vxfs: can't find superblock. [ 305.141893] vxfs: WRONG superblock magic 00000000 at 1 [ 305.142987] vxfs: WRONG superblock magic 00000000 at 8 [ 305.142991] vxfs: can't find superblock. [ 305.242638] FAULT_INJECTION: forcing a failure. [ 305.242638] name failslab, interval 1, probability 0, space 0, times 0 [ 305.242651] CPU: 0 PID: 11901 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 305.242658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.242661] Call Trace: [ 305.242675] dump_stack+0x1b2/0x281 [ 305.242691] should_fail.cold+0x10a/0x149 [ 305.242706] should_failslab+0xd6/0x130 [ 305.242721] kmem_cache_alloc+0x28e/0x3c0 [ 305.242736] __kernfs_new_node+0x6f/0x470 [ 305.242750] kernfs_new_node+0x7b/0xe0 [ 305.242760] __kernfs_create_file+0x3d/0x320 [ 305.242771] sysfs_add_file_mode_ns+0x1e1/0x450 [ 305.242780] ? kernfs_create_dir_ns+0x171/0x200 [ 305.242790] internal_create_group+0x22b/0x710 [ 305.242806] lo_ioctl+0x1137/0x1cd0 [ 305.242819] ? loop_set_status64+0xe0/0xe0 [ 305.242832] blkdev_ioctl+0x540/0x1830 [ 305.242838] FAULT_INJECTION: forcing a failure. [ 305.242838] name failslab, interval 1, probability 0, space 0, times 0 [ 305.242844] ? blkpg_ioctl+0x8d0/0x8d0 [ 305.242852] ? trace_hardirqs_on+0x10/0x10 [ 305.242862] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 305.242870] ? debug_check_no_obj_freed+0x2c0/0x680 [ 305.242880] block_ioctl+0xd9/0x120 [ 305.242886] ? blkdev_fallocate+0x3a0/0x3a0 [ 305.242894] do_vfs_ioctl+0x75a/0xff0 [ 305.242901] ? lock_acquire+0x170/0x3f0 [ 305.242907] ? ioctl_preallocate+0x1a0/0x1a0 [ 305.242916] ? __fget+0x265/0x3e0 [ 305.242924] ? do_vfs_ioctl+0xff0/0xff0 [ 305.242941] ? security_file_ioctl+0x83/0xb0 [ 305.242950] SyS_ioctl+0x7f/0xb0 [ 305.242956] ? do_vfs_ioctl+0xff0/0xff0 [ 305.242966] do_syscall_64+0x1d5/0x640 [ 305.242978] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 305.242984] RIP: 0033:0x7fdc42060ec7 [ 305.242988] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.242996] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 305.242999] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 305.243003] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 305.243007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 305.243011] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 305.243026] CPU: 1 PID: 11903 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 305.243031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.243034] Call Trace: [ 305.243044] dump_stack+0x1b2/0x281 [ 305.243057] should_fail.cold+0x10a/0x149 [ 305.243068] should_failslab+0xd6/0x130 [ 305.243079] kmem_cache_alloc+0x28e/0x3c0 [ 305.243090] __kernfs_new_node+0x6f/0x470 [ 305.243103] kernfs_new_node+0x7b/0xe0 [ 305.243114] __kernfs_create_file+0x3d/0x320 [ 305.243124] sysfs_add_file_mode_ns+0x1e1/0x450 [ 305.243132] ? kernfs_create_dir_ns+0x171/0x200 [ 305.243142] internal_create_group+0x22b/0x710 [ 305.243156] lo_ioctl+0x1137/0x1cd0 [ 305.243169] ? loop_set_status64+0xe0/0xe0 [ 305.243180] blkdev_ioctl+0x540/0x1830 [ 305.243191] ? blkpg_ioctl+0x8d0/0x8d0 [ 305.243200] ? trace_hardirqs_on+0x10/0x10 [ 305.243212] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 305.243222] ? debug_check_no_obj_freed+0x2c0/0x680 [ 305.243236] block_ioctl+0xd9/0x120 [ 305.243244] ? blkdev_fallocate+0x3a0/0x3a0 [ 305.243254] do_vfs_ioctl+0x75a/0xff0 [ 305.243264] ? lock_acquire+0x170/0x3f0 [ 305.243274] ? ioctl_preallocate+0x1a0/0x1a0 [ 305.243286] ? __fget+0x265/0x3e0 [ 305.243297] ? do_vfs_ioctl+0xff0/0xff0 [ 305.243307] ? security_file_ioctl+0x83/0xb0 [ 305.243318] SyS_ioctl+0x7f/0xb0 [ 305.243325] ? do_vfs_ioctl+0xff0/0xff0 [ 305.243335] do_syscall_64+0x1d5/0x640 [ 305.243350] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 305.243357] RIP: 0033:0x7f8777d7aec7 [ 305.243362] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.243371] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 305.243376] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 305.243382] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 305.243387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 23:44:34 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) 23:44:34 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 16) 23:44:34 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 18) 23:44:34 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, 0xfffffffffffffffd, 0x5e7940, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x701000, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)={0x5b, 0x7d, 0x2, {0x0, 0x54, 0x3e, 0x3e, {0x10, 0x2, 0x4}, 0x0, 0x5, 0xc985, 0x6, 0xb, '/dev/audio\x00', 0xb, '/dev/audio\x00', 0xa, '\\!:\x02\xdb^(){:', 0x1, '('}}, 0x5b) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r1, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(r1, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:34 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) socketpair(0x2, 0x4, 0x200, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="002000800000ffff00000002431b00cc0067000004049078ac1414aa7f0000010094040000862700000003020a285bab13818e07f307090c41d6eb484b5d000edfdc3e30b5a33436025f5d6c891712ac1e00010a010100e00000027f00000100000000440c2683ac1e0001000000084410a5700000000900000000fffffff8862fffffffff070b6c8c1fa45f298d3d0607121df540bc14f7927b4973a015562d45b1020c5b37342a3eefa9616e4e441c1c43ffffffff00000009640101010000ffff6401010000000004440c2231ac1e0001000000090000"]}) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="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"]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x18, 0x4, 0x1000, 0x20, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x10, 0x562a, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x10, 0x20, 0x3, 0x400, {{0x37, 0x4, 0x1, 0x20, 0xdc, 0x67, 0x0, 0x9, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0xa8, [@local, @private=0xa010101, @remote]}, @rr={0x7, 0x1b, 0xdf, [@loopback, @rand_addr=0x64010100, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @timestamp_prespec={0x44, 0x44, 0xbb, 0x3, 0x6, [{@rand_addr=0x64010102, 0x1000}, {@local}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x3f}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x1}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x101}]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x7, 0x4, "1acb"}]}, @timestamp_addr={0x44, 0x24, 0x87, 0x1, 0xd, [{@rand_addr=0x64010100, 0x8e}, {@empty, 0x5}, {@empty, 0x4}, {@rand_addr=0x64010102, 0x5}]}, @timestamp_addr={0x44, 0x24, 0xcb, 0x1, 0x0, [{@multicast1, 0x4}, {@multicast1, 0xf693}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x4}, {@remote, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x1b0, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20008841}, 0x4000000) 23:44:34 executing program 4: syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x0) [ 305.243392] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 305.256391] vxfs: WRONG superblock magic 00000000 at 1 [ 305.257161] vxfs: WRONG superblock magic 00000000 at 8 [ 305.257166] vxfs: can't find superblock. [ 305.257191] vxfs: WRONG superblock magic 00000000 at 1 [ 305.258452] vxfs: WRONG superblock magic 00000000 at 8 [ 305.258456] vxfs: can't find superblock. 23:44:34 executing program 1: syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) 23:44:34 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, 0xfffffffffffffffd, 0x5e7940, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x701000, 0x0) (async) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)={0x5b, 0x7d, 0x2, {0x0, 0x54, 0x3e, 0x3e, {0x10, 0x2, 0x4}, 0x0, 0x5, 0xc985, 0x6, 0xb, '/dev/audio\x00', 0xb, '/dev/audio\x00', 0xa, '\\!:\x02\xdb^(){:', 0x1, '('}}, 0x5b) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) (async) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r1, &(0x7f0000000680)={0xb}, 0xb) (async) write$P9_RREAD(r1, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:34 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, 0xfffffffffffffffd, 0x5e7940, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x701000, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)={0x5b, 0x7d, 0x2, {0x0, 0x54, 0x3e, 0x3e, {0x10, 0x2, 0x4}, 0x0, 0x5, 0xc985, 0x6, 0xb, '/dev/audio\x00', 0xb, '/dev/audio\x00', 0xa, '\\!:\x02\xdb^(){:', 0x1, '('}}, 0x5b) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r1, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(r1, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:34 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) socketpair(0x2, 0x4, 0x200, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="002000800000ffff00000002431b00cc0067000004049078ac1414aa7f0000010094040000862700000003020a285bab13818e07f307090c41d6eb484b5d000edfdc3e30b5a33436025f5d6c891712ac1e00010a010100e00000027f00000100000000440c2683ac1e0001000000084410a5700000000900000000fffffff8862fffffffff070b6c8c1fa45f298d3d0607121df540bc14f7927b4973a015562d45b1020c5b37342a3eefa9616e4e441c1c43ffffffff00000009640101010000ffff6401010000000004440c2231ac1e0001000000090000"]}) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="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"]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x18, 0x4, 0x1000, 0x20, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x10, 0x562a, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x10, 0x20, 0x3, 0x400, {{0x37, 0x4, 0x1, 0x20, 0xdc, 0x67, 0x0, 0x9, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0xa8, [@local, @private=0xa010101, @remote]}, @rr={0x7, 0x1b, 0xdf, [@loopback, @rand_addr=0x64010100, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @timestamp_prespec={0x44, 0x44, 0xbb, 0x3, 0x6, [{@rand_addr=0x64010102, 0x1000}, {@local}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x3f}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x1}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x101}]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x7, 0x4, "1acb"}]}, @timestamp_addr={0x44, 0x24, 0x87, 0x1, 0xd, [{@rand_addr=0x64010100, 0x8e}, {@empty, 0x5}, {@empty, 0x4}, {@rand_addr=0x64010102, 0x5}]}, @timestamp_addr={0x44, 0x24, 0xcb, 0x1, 0x0, [{@multicast1, 0x4}, {@multicast1, 0xf693}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x4}, {@remote, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x1b0, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20008841}, 0x4000000) [ 306.254218] FAULT_INJECTION: forcing a failure. [ 306.254218] name failslab, interval 1, probability 0, space 0, times 0 [ 306.268590] FAULT_INJECTION: forcing a failure. [ 306.268590] name failslab, interval 1, probability 0, space 0, times 0 [ 306.304632] CPU: 1 PID: 11934 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 306.312550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.321904] Call Trace: [ 306.324492] dump_stack+0x1b2/0x281 [ 306.328128] should_fail.cold+0x10a/0x149 [ 306.332403] should_failslab+0xd6/0x130 [ 306.336377] kmem_cache_alloc+0x28e/0x3c0 [ 306.340532] __kernfs_new_node+0x6f/0x470 [ 306.345640] kernfs_new_node+0x7b/0xe0 [ 306.349536] __kernfs_create_file+0x3d/0x320 [ 306.353950] sysfs_add_file_mode_ns+0x1e1/0x450 [ 306.358618] ? kernfs_create_dir_ns+0x171/0x200 [ 306.363289] internal_create_group+0x22b/0x710 [ 306.367877] lo_ioctl+0x1137/0x1cd0 [ 306.371507] ? loop_set_status64+0xe0/0xe0 [ 306.375745] blkdev_ioctl+0x540/0x1830 [ 306.379634] ? blkpg_ioctl+0x8d0/0x8d0 [ 306.383517] ? trace_hardirqs_on+0x10/0x10 [ 306.387847] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 306.392949] ? debug_check_no_obj_freed+0x2c0/0x680 [ 306.397970] block_ioctl+0xd9/0x120 [ 306.401597] ? blkdev_fallocate+0x3a0/0x3a0 [ 306.405921] do_vfs_ioctl+0x75a/0xff0 [ 306.409721] ? lock_acquire+0x170/0x3f0 [ 306.413692] ? ioctl_preallocate+0x1a0/0x1a0 [ 306.418103] ? __fget+0x265/0x3e0 [ 306.421559] ? do_vfs_ioctl+0xff0/0xff0 [ 306.425531] ? security_file_ioctl+0x83/0xb0 [ 306.429936] SyS_ioctl+0x7f/0xb0 [ 306.433310] ? do_vfs_ioctl+0xff0/0xff0 [ 306.437280] do_syscall_64+0x1d5/0x640 [ 306.441180] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 306.446364] RIP: 0033:0x7fdc42060ec7 [ 306.450061] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.457756] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 306.465106] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 306.472359] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 306.479625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 306.486877] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 306.494141] CPU: 0 PID: 11938 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 23:44:34 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, 0xfffffffffffffffd, 0x5e7940, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x701000, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)={0x5b, 0x7d, 0x2, {0x0, 0x54, 0x3e, 0x3e, {0x10, 0x2, 0x4}, 0x0, 0x5, 0xc985, 0x6, 0xb, '/dev/audio\x00', 0xb, '/dev/audio\x00', 0xa, '\\!:\x02\xdb^(){:', 0x1, '('}}, 0x5b) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r1, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(r1, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:34 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, 0xfffffffffffffffd, 0x5e7940, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x701000, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)={0x5b, 0x7d, 0x2, {0x0, 0x54, 0x3e, 0x3e, {0x10, 0x2, 0x4}, 0x0, 0x5, 0xc985, 0x6, 0xb, '/dev/audio\x00', 0xb, '/dev/audio\x00', 0xa, '\\!:\x02\xdb^(){:', 0x1, '('}}, 0x5b) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r1, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(r1, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) openat$dsp(0xffffffffffffff9c, 0xfffffffffffffffd, 0x5e7940, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x701000, 0x0) (async) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)={0x5b, 0x7d, 0x2, {0x0, 0x54, 0x3e, 0x3e, {0x10, 0x2, 0x4}, 0x0, 0x5, 0xc985, 0x6, 0xb, '/dev/audio\x00', 0xb, '/dev/audio\x00', 0xa, '\\!:\x02\xdb^(){:', 0x1, '('}}, 0x5b) (async) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) (async) pipe2$9p(&(0x7f0000000640), 0x0) (async) write$P9_RREAD(r1, &(0x7f0000000680)={0xb}, 0xb) (async) write$P9_RREAD(r1, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) (async) 23:44:34 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) socketpair(0x2, 0x4, 0x200, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="002000800000ffff00000002431b00cc0067000004049078ac1414aa7f0000010094040000862700000003020a285bab13818e07f307090c41d6eb484b5d000edfdc3e30b5a33436025f5d6c891712ac1e00010a010100e00000027f00000100000000440c2683ac1e0001000000084410a5700000000900000000fffffff8862fffffffff070b6c8c1fa45f298d3d0607121df540bc14f7927b4973a015562d45b1020c5b37342a3eefa9616e4e441c1c43ffffffff00000009640101010000ffff6401010000000004440c2231ac1e0001000000090000"]}) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="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"]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x18, 0x4, 0x1000, 0x20, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x10, 0x562a, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x10, 0x20, 0x3, 0x400, {{0x37, 0x4, 0x1, 0x20, 0xdc, 0x67, 0x0, 0x9, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0xa8, [@local, @private=0xa010101, @remote]}, @rr={0x7, 0x1b, 0xdf, [@loopback, @rand_addr=0x64010100, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @timestamp_prespec={0x44, 0x44, 0xbb, 0x3, 0x6, [{@rand_addr=0x64010102, 0x1000}, {@local}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x3f}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x1}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x101}]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x7, 0x4, "1acb"}]}, @timestamp_addr={0x44, 0x24, 0x87, 0x1, 0xd, [{@rand_addr=0x64010100, 0x8e}, {@empty, 0x5}, {@empty, 0x4}, {@rand_addr=0x64010102, 0x5}]}, @timestamp_addr={0x44, 0x24, 0xcb, 0x1, 0x0, [{@multicast1, 0x4}, {@multicast1, 0xf693}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x4}, {@remote, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x1b0, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20008841}, 0x4000000) [ 306.502037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.511385] Call Trace: [ 306.513978] dump_stack+0x1b2/0x281 [ 306.514883] vxfs: WRONG superblock magic 00000000 at 1 [ 306.517607] should_fail.cold+0x10a/0x149 [ 306.517630] should_failslab+0xd6/0x130 [ 306.517643] kmem_cache_alloc+0x28e/0x3c0 [ 306.517657] __kernfs_new_node+0x6f/0x470 [ 306.517671] kernfs_new_node+0x7b/0xe0 [ 306.529967] vxfs: WRONG superblock magic 00000000 at 8 [ 306.531227] __kernfs_create_file+0x3d/0x320 [ 306.531241] sysfs_add_file_mode_ns+0x1e1/0x450 [ 306.531250] ? kernfs_create_dir_ns+0x171/0x200 [ 306.531261] internal_create_group+0x22b/0x710 [ 306.531280] lo_ioctl+0x1137/0x1cd0 [ 306.538840] vxfs: can't find superblock. [ 306.539582] ? loop_set_status64+0xe0/0xe0 [ 306.579939] blkdev_ioctl+0x540/0x1830 [ 306.583827] ? blkpg_ioctl+0x8d0/0x8d0 [ 306.587713] ? trace_hardirqs_on+0x10/0x10 [ 306.591949] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 306.597050] ? debug_check_no_obj_freed+0x2c0/0x680 [ 306.602069] block_ioctl+0xd9/0x120 [ 306.605694] ? blkdev_fallocate+0x3a0/0x3a0 [ 306.610012] do_vfs_ioctl+0x75a/0xff0 [ 306.613811] ? lock_acquire+0x170/0x3f0 [ 306.617782] ? ioctl_preallocate+0x1a0/0x1a0 [ 306.622190] ? __fget+0x265/0x3e0 [ 306.625643] ? do_vfs_ioctl+0xff0/0xff0 [ 306.629618] ? security_file_ioctl+0x83/0xb0 [ 306.634022] SyS_ioctl+0x7f/0xb0 [ 306.637384] ? do_vfs_ioctl+0xff0/0xff0 [ 306.641354] do_syscall_64+0x1d5/0x640 [ 306.645249] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 306.650436] RIP: 0033:0x7f8777d7aec7 [ 306.654142] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.661879] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 306.669144] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 306.676405] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 306.683681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 306.690945] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 306.732953] vxfs: WRONG superblock magic 00000000 at 1 [ 306.741248] vxfs: WRONG superblock magic 00000000 at 8 [ 306.747747] vxfs: can't find superblock. 23:44:34 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 17) 23:44:34 executing program 1: syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) 23:44:34 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, 0xfffffffffffffffd, 0x5e7940, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x701000, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)={0x5b, 0x7d, 0x2, {0x0, 0x54, 0x3e, 0x3e, {0x10, 0x2, 0x4}, 0x0, 0x5, 0xc985, 0x6, 0xb, '/dev/audio\x00', 0xb, '/dev/audio\x00', 0xa, '\\!:\x02\xdb^(){:', 0x1, '('}}, 0x5b) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r1, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(r1, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:34 executing program 5: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000fedbdf2505f90000060003004000000008000a0004000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x41) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) 23:44:34 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) socketpair(0x2, 0x4, 0x200, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="002000800000ffff00000002431b00cc0067000004049078ac1414aa7f0000010094040000862700000003020a285bab13818e07f307090c41d6eb484b5d000edfdc3e30b5a33436025f5d6c891712ac1e00010a010100e00000027f00000100000000440c2683ac1e0001000000084410a5700000000900000000fffffff8862fffffffff070b6c8c1fa45f298d3d0607121df540bc14f7927b4973a015562d45b1020c5b37342a3eefa9616e4e441c1c43ffffffff00000009640101010000ffff6401010000000004440c2231ac1e0001000000090000"]}) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="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"]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x18, 0x4, 0x1000, 0x20, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x10, 0x562a, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x10, 0x20, 0x3, 0x400, {{0x37, 0x4, 0x1, 0x20, 0xdc, 0x67, 0x0, 0x9, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0xa8, [@local, @private=0xa010101, @remote]}, @rr={0x7, 0x1b, 0xdf, [@loopback, @rand_addr=0x64010100, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @timestamp_prespec={0x44, 0x44, 0xbb, 0x3, 0x6, [{@rand_addr=0x64010102, 0x1000}, {@local}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x3f}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x1}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x101}]}, @noop, @cipso={0x86, 0xa, 0x0, [{0x7, 0x4, "1acb"}]}, @timestamp_addr={0x44, 0x24, 0x87, 0x1, 0xd, [{@rand_addr=0x64010100, 0x8e}, {@empty, 0x5}, {@empty, 0x4}, {@rand_addr=0x64010102, 0x5}]}, @timestamp_addr={0x44, 0x24, 0xcb, 0x1, 0x0, [{@multicast1, 0x4}, {@multicast1, 0xf693}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x4}, {@remote, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) 23:44:34 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 19) 23:44:34 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, 0xfffffffffffffffd, 0x5e7940, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x701000, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)={0x5b, 0x7d, 0x2, {0x0, 0x54, 0x3e, 0x3e, {0x10, 0x2, 0x4}, 0x0, 0x5, 0xc985, 0x6, 0xb, '/dev/audio\x00', 0xb, '/dev/audio\x00', 0xa, '\\!:\x02\xdb^(){:', 0x1, '('}}, 0x5b) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r1, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:34 executing program 5: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000fedbdf2505f90000060003004000000008000a0004000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x41) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000fedbdf2505f90000060003004000000008000a0004000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x41) (async) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) pipe2$watch_queue(&(0x7f0000000100), 0x80) (async) 23:44:34 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) socketpair(0x2, 0x4, 0x200, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="002000800000ffff00000002431b00cc0067000004049078ac1414aa7f0000010094040000862700000003020a285bab13818e07f307090c41d6eb484b5d000edfdc3e30b5a33436025f5d6c891712ac1e00010a010100e00000027f00000100000000440c2683ac1e0001000000084410a5700000000900000000fffffff8862fffffffff070b6c8c1fa45f298d3d0607121df540bc14f7927b4973a015562d45b1020c5b37342a3eefa9616e4e441c1c43ffffffff00000009640101010000ffff6401010000000004440c2231ac1e0001000000090000"]}) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="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"]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x18, 0x4, 0x1000, 0x20, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x10, 0x562a, 0x8}}) 23:44:34 executing program 1: syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000100)={0x7, 0x0, [{0x9, 0x3ff, 0x0, [0x4b46, 0x2, 0x5, 0x4, 0xff, 0x80, 0xce2, 0x1020]}, {0x81, 0x1ff, 0x0, [0x70000, 0x1, 0x5, 0x75, 0x7, 0x800, 0xd3d6, 0x4]}, {0x1, 0x5, 0x8, [0xc92, 0x9, 0x3, 0xf, 0xff, 0x7, 0x3, 0x80000000]}, {0x1, 0xfffff872, 0x1, [0x1, 0x2, 0x5, 0x6, 0x9, 0x8, 0x100, 0x800]}, {0x4, 0x1, 0x80000001, [0x5, 0x4, 0x5, 0xffff, 0x400, 0x1f, 0x1, 0x401]}, {0x3, 0x7ff, 0x9, [0x88, 0x900000, 0xfffffff7, 0x20, 0x400, 0x7f, 0x0, 0x5]}, {0x8, 0x3, 0x5, [0x5, 0x8001, 0x3, 0x7, 0xa8bb, 0x5, 0x6, 0x3]}]}) 23:44:34 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, 0xfffffffffffffffd, 0x5e7940, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x701000, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)={0x5b, 0x7d, 0x2, {0x0, 0x54, 0x3e, 0x3e, {0x10, 0x2, 0x4}, 0x0, 0x5, 0xc985, 0x6, 0xb, '/dev/audio\x00', 0xb, '/dev/audio\x00', 0xa, '\\!:\x02\xdb^(){:', 0x1, '('}}, 0x5b) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r1, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:34 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) socketpair(0x2, 0x4, 0x200, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="002000800000ffff00000002431b00cc0067000004049078ac1414aa7f0000010094040000862700000003020a285bab13818e07f307090c41d6eb484b5d000edfdc3e30b5a33436025f5d6c891712ac1e00010a010100e00000027f00000100000000440c2683ac1e0001000000084410a5700000000900000000fffffff8862fffffffff070b6c8c1fa45f298d3d0607121df540bc14f7927b4973a015562d45b1020c5b37342a3eefa9616e4e441c1c43ffffffff00000009640101010000ffff6401010000000004440c2231ac1e0001000000090000"]}) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="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"]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) [ 306.893517] FAULT_INJECTION: forcing a failure. [ 306.893517] name failslab, interval 1, probability 0, space 0, times 0 [ 306.910818] FAULT_INJECTION: forcing a failure. [ 306.910818] name failslab, interval 1, probability 0, space 0, times 0 [ 306.960341] CPU: 1 PID: 12000 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 306.968258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.977610] Call Trace: [ 306.980209] dump_stack+0x1b2/0x281 [ 306.983849] should_fail.cold+0x10a/0x149 [ 306.988046] should_failslab+0xd6/0x130 [ 306.992029] kmem_cache_alloc+0x28e/0x3c0 [ 306.996180] __kernfs_new_node+0x6f/0x470 [ 307.000336] kernfs_new_node+0x7b/0xe0 [ 307.004230] __kernfs_create_file+0x3d/0x320 [ 307.008638] sysfs_add_file_mode_ns+0x1e1/0x450 [ 307.013301] ? kernfs_create_dir_ns+0x171/0x200 [ 307.018069] internal_create_group+0x22b/0x710 [ 307.022637] lo_ioctl+0x1137/0x1cd0 [ 307.026247] ? loop_set_status64+0xe0/0xe0 [ 307.030474] blkdev_ioctl+0x540/0x1830 [ 307.034342] ? blkpg_ioctl+0x8d0/0x8d0 [ 307.038220] ? trace_hardirqs_on+0x10/0x10 [ 307.042442] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 307.047526] ? debug_check_no_obj_freed+0x2c0/0x680 [ 307.052537] block_ioctl+0xd9/0x120 [ 307.056234] ? blkdev_fallocate+0x3a0/0x3a0 [ 307.060546] do_vfs_ioctl+0x75a/0xff0 [ 307.064342] ? lock_acquire+0x170/0x3f0 [ 307.068299] ? ioctl_preallocate+0x1a0/0x1a0 [ 307.072696] ? __fget+0x265/0x3e0 [ 307.076144] ? do_vfs_ioctl+0xff0/0xff0 [ 307.080103] ? security_file_ioctl+0x83/0xb0 [ 307.084492] SyS_ioctl+0x7f/0xb0 [ 307.087847] ? do_vfs_ioctl+0xff0/0xff0 [ 307.091806] do_syscall_64+0x1d5/0x640 [ 307.095686] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 307.100869] RIP: 0033:0x7f8777d7aec7 [ 307.104661] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.112356] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 307.119615] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 307.126868] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 307.134118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 307.141378] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 307.148652] CPU: 0 PID: 12001 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 307.156538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.161077] vxfs: WRONG superblock magic 00000000 at 1 [ 307.165886] Call Trace: [ 307.165905] dump_stack+0x1b2/0x281 [ 307.165920] should_fail.cold+0x10a/0x149 [ 307.165932] should_failslab+0xd6/0x130 [ 307.165943] __kmalloc+0x2c1/0x400 [ 307.165951] ? kobject_get_path+0xb5/0x230 [ 307.165960] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 307.165972] kobject_get_path+0xb5/0x230 [ 307.165985] kobject_uevent_env+0x230/0xf30 [ 307.165997] ? internal_create_group+0x48f/0x710 [ 307.166012] lo_ioctl+0x11a6/0x1cd0 [ 307.166025] ? loop_set_status64+0xe0/0xe0 [ 307.166036] blkdev_ioctl+0x540/0x1830 [ 307.166048] ? blkpg_ioctl+0x8d0/0x8d0 [ 307.171657] vxfs: WRONG superblock magic 00000000 at 8 [ 307.173993] ? trace_hardirqs_on+0x10/0x10 [ 307.174010] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 307.174020] ? debug_check_no_obj_freed+0x2c0/0x680 [ 307.174034] block_ioctl+0xd9/0x120 [ 307.178178] vxfs: can't find superblock. [ 307.181772] ? blkdev_fallocate+0x3a0/0x3a0 [ 307.181785] do_vfs_ioctl+0x75a/0xff0 [ 307.181796] ? lock_acquire+0x170/0x3f0 [ 307.181805] ? ioctl_preallocate+0x1a0/0x1a0 [ 307.271212] ? __fget+0x265/0x3e0 [ 307.274668] ? do_vfs_ioctl+0xff0/0xff0 [ 307.278662] ? security_file_ioctl+0x83/0xb0 [ 307.283077] SyS_ioctl+0x7f/0xb0 [ 307.286527] ? do_vfs_ioctl+0xff0/0xff0 [ 307.290502] do_syscall_64+0x1d5/0x640 [ 307.294400] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 307.299576] RIP: 0033:0x7fdc42060ec7 [ 307.303289] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.310972] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 307.318219] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 307.325466] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 307.332716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 307.339973] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 307.351681] vxfs: WRONG superblock magic 00000000 at 1 23:44:35 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 18) 23:44:35 executing program 5: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000fedbdf2505f90000060003004000000008000a0004000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x41) (async) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) pipe2$watch_queue(&(0x7f0000000100), 0x80) 23:44:35 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) socketpair(0x2, 0x4, 0x200, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="002000800000ffff00000002431b00cc0067000004049078ac1414aa7f0000010094040000862700000003020a285bab13818e07f307090c41d6eb484b5d000edfdc3e30b5a33436025f5d6c891712ac1e00010a010100e00000027f00000100000000440c2683ac1e0001000000084410a5700000000900000000fffffff8862fffffffff070b6c8c1fa45f298d3d0607121df540bc14f7927b4973a015562d45b1020c5b37342a3eefa9616e4e441c1c43ffffffff00000009640101010000ffff6401010000000004440c2231ac1e0001000000090000"]}) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="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"]}) socket$nl_generic(0x10, 0x3, 0x10) 23:44:35 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, 0xfffffffffffffffd, 0x5e7940, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x701000, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)={0x5b, 0x7d, 0x2, {0x0, 0x54, 0x3e, 0x3e, {0x10, 0x2, 0x4}, 0x0, 0x5, 0xc985, 0x6, 0xb, '/dev/audio\x00', 0xb, '/dev/audio\x00', 0xa, '\\!:\x02\xdb^(){:', 0x1, '('}}, 0x5b) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r1, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:35 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x200000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) [ 307.357491] vxfs: WRONG superblock magic 00000000 at 8 [ 307.362892] vxfs: can't find superblock. 23:44:35 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 20) 23:44:35 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, 0xfffffffffffffffd, 0x5e7940, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x701000, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)={0x5b, 0x7d, 0x2, {0x0, 0x54, 0x3e, 0x3e, {0x10, 0x2, 0x4}, 0x0, 0x5, 0xc985, 0x6, 0xb, '/dev/audio\x00', 0xb, '/dev/audio\x00', 0xa, '\\!:\x02\xdb^(){:', 0x1, '('}}, 0x5b) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:35 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) socketpair(0x2, 0x4, 0x200, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="002000800000ffff00000002431b00cc0067000004049078ac1414aa7f0000010094040000862700000003020a285bab13818e07f307090c41d6eb484b5d000edfdc3e30b5a33436025f5d6c891712ac1e00010a010100e00000027f00000100000000440c2683ac1e0001000000084410a5700000000900000000fffffff8862fffffffff070b6c8c1fa45f298d3d0607121df540bc14f7927b4973a015562d45b1020c5b37342a3eefa9616e4e441c1c43ffffffff00000009640101010000ffff6401010000000004440c2231ac1e0001000000090000"]}) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="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"]}) 23:44:35 executing program 5: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x103800, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:35 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) socketpair(0x2, 0x4, 0x200, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="002000800000ffff00000002431b00cc0067000004049078ac1414aa7f0000010094040000862700000003020a285bab13818e07f307090c41d6eb484b5d000edfdc3e30b5a33436025f5d6c891712ac1e00010a010100e00000027f00000100000000440c2683ac1e0001000000084410a5700000000900000000fffffff8862fffffffff070b6c8c1fa45f298d3d0607121df540bc14f7927b4973a015562d45b1020c5b37342a3eefa9616e4e441c1c43ffffffff00000009640101010000ffff6401010000000004440c2231ac1e0001000000090000"]}) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="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"]}) socket$nl_generic(0x10, 0x3, 0x10) [ 307.445752] FAULT_INJECTION: forcing a failure. [ 307.445752] name failslab, interval 1, probability 0, space 0, times 0 [ 307.480517] CPU: 0 PID: 12047 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 23:44:35 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, 0xfffffffffffffffd, 0x5e7940, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x701000, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)={0x5b, 0x7d, 0x2, {0x0, 0x54, 0x3e, 0x3e, {0x10, 0x2, 0x4}, 0x0, 0x5, 0xc985, 0x6, 0xb, '/dev/audio\x00', 0xb, '/dev/audio\x00', 0xa, '\\!:\x02\xdb^(){:', 0x1, '('}}, 0x5b) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) [ 307.488538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.498066] Call Trace: [ 307.500660] dump_stack+0x1b2/0x281 [ 307.504294] should_fail.cold+0x10a/0x149 [ 307.508450] should_failslab+0xd6/0x130 [ 307.511784] FAULT_INJECTION: forcing a failure. [ 307.511784] name failslab, interval 1, probability 0, space 0, times 0 [ 307.512421] kmem_cache_alloc+0x28e/0x3c0 [ 307.512443] __kernfs_new_node+0x6f/0x470 [ 307.512458] kernfs_new_node+0x7b/0xe0 [ 307.535993] __kernfs_create_file+0x3d/0x320 [ 307.540412] sysfs_add_file_mode_ns+0x1e1/0x450 23:44:35 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) socketpair(0x2, 0x4, 0x200, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="002000800000ffff00000002431b00cc0067000004049078ac1414aa7f0000010094040000862700000003020a285bab13818e07f307090c41d6eb484b5d000edfdc3e30b5a33436025f5d6c891712ac1e00010a010100e00000027f00000100000000440c2683ac1e0001000000084410a5700000000900000000fffffff8862fffffffff070b6c8c1fa45f298d3d0607121df540bc14f7927b4973a015562d45b1020c5b37342a3eefa9616e4e441c1c43ffffffff00000009640101010000ffff6401010000000004440c2231ac1e0001000000090000"]}) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) [ 307.545077] ? kernfs_create_dir_ns+0x171/0x200 [ 307.549783] internal_create_group+0x22b/0x710 [ 307.554364] lo_ioctl+0x1137/0x1cd0 [ 307.557987] ? loop_set_status64+0xe0/0xe0 [ 307.562218] blkdev_ioctl+0x540/0x1830 [ 307.566100] ? blkpg_ioctl+0x8d0/0x8d0 [ 307.569976] ? trace_hardirqs_on+0x10/0x10 [ 307.574213] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 307.579311] ? debug_check_no_obj_freed+0x2c0/0x680 [ 307.584330] block_ioctl+0xd9/0x120 [ 307.587948] ? blkdev_fallocate+0x3a0/0x3a0 [ 307.592260] do_vfs_ioctl+0x75a/0xff0 [ 307.596065] ? lock_acquire+0x170/0x3f0 [ 307.600037] ? ioctl_preallocate+0x1a0/0x1a0 [ 307.604443] ? __fget+0x265/0x3e0 [ 307.607886] ? do_vfs_ioctl+0xff0/0xff0 [ 307.611843] ? security_file_ioctl+0x83/0xb0 [ 307.616235] SyS_ioctl+0x7f/0xb0 [ 307.619579] ? do_vfs_ioctl+0xff0/0xff0 [ 307.623536] do_syscall_64+0x1d5/0x640 [ 307.627406] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 307.632666] RIP: 0033:0x7f8777d7aec7 [ 307.636360] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.644058] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 307.651311] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 307.658559] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 307.665807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 307.673055] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 307.692339] CPU: 1 PID: 12058 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 307.700232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.709669] Call Trace: [ 307.712253] dump_stack+0x1b2/0x281 [ 307.715920] should_fail.cold+0x10a/0x149 [ 307.720070] should_failslab+0xd6/0x130 [ 307.724076] kmem_cache_alloc_node+0x263/0x410 [ 307.728663] __alloc_skb+0x5c/0x510 [ 307.732470] kobject_uevent_env+0x882/0xf30 [ 307.736824] lo_ioctl+0x11a6/0x1cd0 [ 307.740445] ? loop_set_status64+0xe0/0xe0 [ 307.744681] blkdev_ioctl+0x540/0x1830 [ 307.748568] ? blkpg_ioctl+0x8d0/0x8d0 [ 307.752445] ? trace_hardirqs_on+0x10/0x10 [ 307.756667] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 307.761847] ? debug_check_no_obj_freed+0x2c0/0x680 [ 307.766859] block_ioctl+0xd9/0x120 [ 307.770522] ? blkdev_fallocate+0x3a0/0x3a0 [ 307.774845] do_vfs_ioctl+0x75a/0xff0 [ 307.778639] ? lock_acquire+0x170/0x3f0 [ 307.782593] ? ioctl_preallocate+0x1a0/0x1a0 [ 307.786993] ? __fget+0x265/0x3e0 [ 307.790450] ? do_vfs_ioctl+0xff0/0xff0 [ 307.794414] ? security_file_ioctl+0x83/0xb0 [ 307.798804] SyS_ioctl+0x7f/0xb0 [ 307.802165] ? do_vfs_ioctl+0xff0/0xff0 [ 307.806120] do_syscall_64+0x1d5/0x640 [ 307.810011] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 307.815177] RIP: 0033:0x7fdc42060ec7 [ 307.818867] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.826555] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 307.833818] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 307.841070] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 307.848423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 307.855686] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 307.875915] vxfs: WRONG superblock magic 00000000 at 1 [ 307.881811] vxfs: WRONG superblock magic 00000000 at 8 [ 307.887270] vxfs: can't find superblock. [ 307.892869] vxfs: WRONG superblock magic 00000000 at 1 [ 307.904235] vxfs: WRONG superblock magic 00000000 at 8 [ 307.915269] vxfs: can't find superblock. 23:44:35 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 19) 23:44:35 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, 0xfffffffffffffffd, 0x5e7940, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x701000, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)={0x5b, 0x7d, 0x2, {0x0, 0x54, 0x3e, 0x3e, {0x10, 0x2, 0x4}, 0x0, 0x5, 0xc985, 0x6, 0xb, '/dev/audio\x00', 0xb, '/dev/audio\x00', 0xa, '\\!:\x02\xdb^(){:', 0x1, '('}}, 0x5b) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:35 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) socketpair(0x2, 0x4, 0x200, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) 23:44:35 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) socketpair(0x2, 0x4, 0x200, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="002000800000ffff00000002431b00cc0067000004049078ac1414aa7f0000010094040000862700000003020a285bab13818e07f307090c41d6eb484b5d000edfdc3e30b5a33436025f5d6c891712ac1e00010a010100e00000027f00000100000000440c2683ac1e0001000000084410a5700000000900000000fffffff8862fffffffff070b6c8c1fa45f298d3d0607121df540bc14f7927b4973a015562d45b1020c5b37342a3eefa9616e4e441c1c43ffffffff00000009640101010000ffff6401010000000004440c2231ac1e0001000000090000"]}) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0700000000000adc000010004e6d013800660000072f9078ac1e0101e00000028660000000010106a019ca62051159dfede234709f4e1eb0ac63282561000c333efee64415a3c8940c020ba52c32580dafc59cf7040d8d749c255114537eab210b071264adb2bd690609687b9560e8cee66e7d020d168c1ce66470e951128001892786e0000001ffffffff7f0000017f00000100000000ac1e010100000000ac1414aaac1414bb891b0cac14143d0a0101027f000001ac1e00010a010101e00000010100444c9c71e00000010000000300000000ffff8000e0000001000007ffffffffff0000009f0000000000000100e000000200000000ac1414aa00000090e000000100001000ac1e010100001df744242b83ac141410000001900000000000000007e0000001000000067f000001000100014408937000000002070706e00000010050b2a3454c"]}) socket$nl_generic(0x10, 0x3, 0x10) 23:44:35 executing program 5: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x103800, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:35 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 21) 23:44:35 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) socketpair(0x2, 0x4, 0x200, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="002000800000ffff00000002431b00cc0067000004049078ac1414aa7f0000010094040000862700000003020a285bab13818e07f307090c41d6eb484b5d000edfdc3e30b5a33436025f5d6c891712ac1e00010a010100e00000027f00000100000000440c2683ac1e0001000000084410a5700000000900000000fffffff8862fffffffff070b6c8c1fa45f298d3d0607121df540bc14f7927b4973a015562d45b1020c5b37342a3eefa9616e4e441c1c43ffffffff00000009640101010000ffff6401010000000004440c2231ac1e0001000000090000"]}) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="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"]}) socket$nl_generic(0x10, 0x3, 0x10) 23:44:35 executing program 4: openat$dsp(0xffffffffffffff9c, 0xfffffffffffffffd, 0x5e7940, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x701000, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)={0x5b, 0x7d, 0x2, {0x0, 0x54, 0x3e, 0x3e, {0x10, 0x2, 0x4}, 0x0, 0x5, 0xc985, 0x6, 0xb, '/dev/audio\x00', 0xb, '/dev/audio\x00', 0xa, '\\!:\x02\xdb^(){:', 0x1, '('}}, 0x5b) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(r0, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:35 executing program 5: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x103800, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x103800, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) (async) [ 308.025723] FAULT_INJECTION: forcing a failure. [ 308.025723] name failslab, interval 1, probability 0, space 0, times 0 [ 308.039311] FAULT_INJECTION: forcing a failure. [ 308.039311] name failslab, interval 1, probability 0, space 0, times 0 23:44:35 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) [ 308.072573] CPU: 0 PID: 12088 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 308.080487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.089838] Call Trace: [ 308.092426] dump_stack+0x1b2/0x281 [ 308.096058] should_fail.cold+0x10a/0x149 [ 308.100209] should_failslab+0xd6/0x130 [ 308.104189] kmem_cache_alloc+0x28e/0x3c0 [ 308.108345] __kernfs_new_node+0x6f/0x470 [ 308.112503] kernfs_new_node+0x7b/0xe0 [ 308.116425] __kernfs_create_file+0x3d/0x320 23:44:35 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000000)) [ 308.120820] sysfs_add_file_mode_ns+0x1e1/0x450 [ 308.125490] ? kernfs_create_dir_ns+0x171/0x200 [ 308.130144] internal_create_group+0x22b/0x710 [ 308.134723] lo_ioctl+0x1137/0x1cd0 [ 308.138358] ? loop_set_status64+0xe0/0xe0 [ 308.142606] blkdev_ioctl+0x540/0x1830 [ 308.146499] ? blkpg_ioctl+0x8d0/0x8d0 [ 308.150403] ? trace_hardirqs_on+0x10/0x10 [ 308.154641] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 308.159779] ? debug_check_no_obj_freed+0x2c0/0x680 [ 308.164804] block_ioctl+0xd9/0x120 [ 308.168430] ? blkdev_fallocate+0x3a0/0x3a0 23:44:36 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) [ 308.172749] do_vfs_ioctl+0x75a/0xff0 [ 308.176555] ? lock_acquire+0x170/0x3f0 [ 308.180530] ? ioctl_preallocate+0x1a0/0x1a0 [ 308.184942] ? __fget+0x265/0x3e0 [ 308.188399] ? do_vfs_ioctl+0xff0/0xff0 [ 308.192373] ? security_file_ioctl+0x83/0xb0 [ 308.196783] SyS_ioctl+0x7f/0xb0 [ 308.200147] ? do_vfs_ioctl+0xff0/0xff0 [ 308.204121] do_syscall_64+0x1d5/0x640 [ 308.208004] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 308.213176] RIP: 0033:0x7f8777d7aec7 [ 308.216865] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.224549] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 308.231794] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 308.239059] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 308.246315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 308.253568] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 308.272323] CPU: 0 PID: 12090 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 308.280251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.289612] Call Trace: [ 308.292182] dump_stack+0x1b2/0x281 [ 308.295798] should_fail.cold+0x10a/0x149 [ 308.299928] should_failslab+0xd6/0x130 [ 308.303882] kmem_cache_alloc_node+0x263/0x410 [ 308.308445] __alloc_skb+0x5c/0x510 [ 308.312052] kobject_uevent_env+0x882/0xf30 [ 308.316358] lo_ioctl+0x11a6/0x1cd0 [ 308.319967] ? loop_set_status64+0xe0/0xe0 [ 308.324184] blkdev_ioctl+0x540/0x1830 [ 308.328067] ? blkpg_ioctl+0x8d0/0x8d0 [ 308.331934] ? trace_hardirqs_on+0x10/0x10 [ 308.336155] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 308.341248] ? debug_check_no_obj_freed+0x2c0/0x680 [ 308.346242] block_ioctl+0xd9/0x120 [ 308.349859] ? blkdev_fallocate+0x3a0/0x3a0 [ 308.354180] do_vfs_ioctl+0x75a/0xff0 [ 308.357965] ? lock_acquire+0x170/0x3f0 [ 308.361916] ? ioctl_preallocate+0x1a0/0x1a0 [ 308.366312] ? __fget+0x265/0x3e0 [ 308.369742] ? do_vfs_ioctl+0xff0/0xff0 [ 308.373693] ? security_file_ioctl+0x83/0xb0 [ 308.378079] SyS_ioctl+0x7f/0xb0 [ 308.381432] ? do_vfs_ioctl+0xff0/0xff0 [ 308.385386] do_syscall_64+0x1d5/0x640 [ 308.389252] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 308.394420] RIP: 0033:0x7fdc42060ec7 [ 308.398107] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.405801] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 308.413054] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 308.420299] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 308.427546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 308.434797] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 308.453704] vxfs: WRONG superblock magic 00000000 at 1 [ 308.465521] vxfs: WRONG superblock magic 00000000 at 1 [ 308.469419] vxfs: WRONG superblock magic 00000000 at 8 [ 308.477135] vxfs: can't find superblock. [ 308.480596] vxfs: WRONG superblock magic 00000000 at 8 [ 308.486769] vxfs: can't find superblock. 23:44:36 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 20) 23:44:36 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000000)) 23:44:36 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) 23:44:36 executing program 4: openat$dsp(0xffffffffffffff9c, 0xfffffffffffffffd, 0x5e7940, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x701000, 0x0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(r0, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:36 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) socketpair(0x2, 0x4, 0x200, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="002000800000ffff00000002431b00cc0067000004049078ac1414aa7f0000010094040000862700000003020a285bab13818e07f307090c41d6eb484b5d000edfdc3e30b5a33436025f5d6c891712ac1e00010a010100e00000027f00000100000000440c2683ac1e0001000000084410a5700000000900000000fffffff8862fffffffff070b6c8c1fa45f298d3d0607121df540bc14f7927b4973a015562d45b1020c5b37342a3eefa9616e4e441c1c43ffffffff00000009640101010000ffff6401010000000004440c2231ac1e0001000000090000"]}) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0700000000000adc000010004e6d013800660000072f9078ac1e0101e00000028660000000010106a019ca62051159dfede234709f4e1eb0ac63282561000c333efee64415a3c8940c020ba52c32580dafc59cf7040d8d749c255114537eab210b071264adb2bd690609687b9560e8cee66e7d020d168c1ce66470e951128001892786e0000001ffffffff7f0000017f00000100000000ac1e010100000000ac1414aaac1414bb891b0cac14143d0a0101027f000001ac1e00010a010101e00000010100444c9c71e00000010000000300000000ffff8000e0000001000007ffffffffff0000009f0000000000000100e000000200000000ac1414aa00000090e000000100001000ac1e010100001df744242b83ac141410000001900000000000000007e0000001000000067f000001000100014408937000000002070706e00000010050b2a3454c"]}) 23:44:36 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 22) 23:44:36 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000000)) 23:44:36 executing program 0: ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) [ 308.612527] FAULT_INJECTION: forcing a failure. [ 308.612527] name failslab, interval 1, probability 0, space 0, times 0 [ 308.613776] FAULT_INJECTION: forcing a failure. [ 308.613776] name failslab, interval 1, probability 0, space 0, times 0 [ 308.639390] CPU: 0 PID: 12141 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 308.647290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.656639] Call Trace: [ 308.659227] dump_stack+0x1b2/0x281 23:44:36 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) socketpair(0x2, 0x4, 0x200, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="002000800000ffff00000002431b00cc0067000004049078ac1414aa7f0000010094040000862700000003020a285bab13818e07f307090c41d6eb484b5d000edfdc3e30b5a33436025f5d6c891712ac1e00010a010100e00000027f00000100000000440c2683ac1e0001000000084410a5700000000900000000fffffff8862fffffffff070b6c8c1fa45f298d3d0607121df540bc14f7927b4973a015562d45b1020c5b37342a3eefa9616e4e441c1c43ffffffff00000009640101010000ffff6401010000000004440c2231ac1e0001000000090000"]}) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="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"]}) 23:44:36 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x100000000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x8, 0x1, 0x3, 0x0, 0x4}) pipe2$watch_queue(0x0, 0x80) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) [ 308.662858] should_fail.cold+0x10a/0x149 [ 308.667008] should_failslab+0xd6/0x130 [ 308.670982] kmem_cache_alloc_node+0x263/0x410 [ 308.675566] __alloc_skb+0x5c/0x510 [ 308.679193] kobject_uevent_env+0x882/0xf30 [ 308.683519] lo_ioctl+0x11a6/0x1cd0 [ 308.687143] ? loop_set_status64+0xe0/0xe0 [ 308.691366] blkdev_ioctl+0x540/0x1830 [ 308.695243] ? blkpg_ioctl+0x8d0/0x8d0 [ 308.699130] ? trace_hardirqs_on+0x10/0x10 [ 308.703363] ? _raw_spin_unlock_irqrestore+0x66/0xe0 23:44:36 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x100000000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x8, 0x1, 0x3, 0x0, 0x4}) (async, rerun: 64) pipe2$watch_queue(0x0, 0x80) (async, rerun: 64) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) [ 308.708460] ? debug_check_no_obj_freed+0x2c0/0x680 [ 308.713465] block_ioctl+0xd9/0x120 [ 308.717079] ? blkdev_fallocate+0x3a0/0x3a0 [ 308.721392] do_vfs_ioctl+0x75a/0xff0 [ 308.725181] ? lock_acquire+0x170/0x3f0 [ 308.729174] ? ioctl_preallocate+0x1a0/0x1a0 [ 308.733573] ? __fget+0x265/0x3e0 [ 308.737010] ? do_vfs_ioctl+0xff0/0xff0 [ 308.740980] ? security_file_ioctl+0x83/0xb0 [ 308.745390] SyS_ioctl+0x7f/0xb0 [ 308.748757] ? do_vfs_ioctl+0xff0/0xff0 [ 308.752733] do_syscall_64+0x1d5/0x640 [ 308.756651] entry_SYSCALL_64_after_hwframe+0x46/0xbb 23:44:36 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x100000000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x8, 0x1, 0x3, 0x0, 0x4}) (async, rerun: 32) pipe2$watch_queue(0x0, 0x80) (async, rerun: 32) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) [ 308.761830] RIP: 0033:0x7fdc42060ec7 [ 308.765526] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.773248] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 308.780504] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 308.787788] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 308.795052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 308.802313] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 308.818593] CPU: 1 PID: 12133 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 308.826490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.835836] Call Trace: [ 308.838423] dump_stack+0x1b2/0x281 [ 308.842055] should_fail.cold+0x10a/0x149 [ 308.846207] should_failslab+0xd6/0x130 [ 308.850183] kmem_cache_alloc_trace+0x29a/0x3d0 [ 308.851813] vxfs: WRONG superblock magic 00000000 at 1 [ 308.854850] ? dev_uevent_filter+0xd0/0xd0 [ 308.862979] vxfs: WRONG superblock magic 00000000 at 8 [ 308.864332] kobject_uevent_env+0x20c/0xf30 [ 308.870840] vxfs: can't find superblock. [ 308.873894] ? internal_create_group+0x48f/0x710 [ 308.882676] lo_ioctl+0x11a6/0x1cd0 [ 308.886317] ? loop_set_status64+0xe0/0xe0 [ 308.890552] blkdev_ioctl+0x540/0x1830 [ 308.894444] ? blkpg_ioctl+0x8d0/0x8d0 [ 308.898335] ? trace_hardirqs_on+0x10/0x10 [ 308.902573] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 308.907677] ? debug_check_no_obj_freed+0x2c0/0x680 [ 308.912698] block_ioctl+0xd9/0x120 [ 308.916324] ? blkdev_fallocate+0x3a0/0x3a0 [ 308.920641] do_vfs_ioctl+0x75a/0xff0 [ 308.924439] ? lock_acquire+0x170/0x3f0 [ 308.928501] ? ioctl_preallocate+0x1a0/0x1a0 [ 308.932918] ? __fget+0x265/0x3e0 [ 308.936373] ? do_vfs_ioctl+0xff0/0xff0 [ 308.940345] ? security_file_ioctl+0x83/0xb0 [ 308.944756] SyS_ioctl+0x7f/0xb0 [ 308.948121] ? do_vfs_ioctl+0xff0/0xff0 [ 308.952097] do_syscall_64+0x1d5/0x640 [ 308.955991] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 308.961179] RIP: 0033:0x7f8777d7aec7 [ 308.964883] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.972589] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 308.979859] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 308.987128] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 308.994400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 309.001670] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 23:44:36 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 21) 23:44:36 executing program 4: openat$dsp(0xffffffffffffff9c, 0xfffffffffffffffd, 0x5e7940, 0x0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(r0, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:36 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) socketpair(0x2, 0x4, 0x200, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="002000800000ffff00000002431b00cc0067000004049078ac1414aa7f0000010094040000862700000003020a285bab13818e07f307090c41d6eb484b5d000edfdc3e30b5a33436025f5d6c891712ac1e00010a010100e00000027f00000100000000440c2683ac1e0001000000084410a5700000000900000000fffffff8862fffffffff070b6c8c1fa45f298d3d0607121df540bc14f7927b4973a015562d45b1020c5b37342a3eefa9616e4e441c1c43ffffffff00000009640101010000ffff6401010000000004440c2231ac1e0001000000090000"]}) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) 23:44:36 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) write$dsp(0xffffffffffffffff, &(0x7f0000000140)="dab631526f5a1dcf37b79c7cac5ec18e2ae00442d309f560897e77b7cd8817e359f47cd61310a0010266e32057320e0c596e31ca21f44d316b783e7a3401000000d9bf7890bd480fbd32ed50fd5ac103d78f5ba42dbb33ac569ce869fdbbdac830302d3d2e863b34f2ba2607457c67aedde7157f5f6c7584c9b4813c0dda8db0a6e9831dde23c97337e54b8671169ae7e032fa0787ba3e9d64a983edb27d0443326c513cfe684cc30e7335d6ebb4c8878d4218cc041e8b3c61b7dbe6599391843098dfb00f3b2bec3c428b336057c6d20d62296f9d59e4b2b6abf7524073fc97123fb55468334412ecc62c1581558dc4dc8d47387142", 0xf6) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000040)={0x47, 0x7d, 0x2, {0x0, 0x40, 0x6, 0x2, {0x80, 0x3, 0x7}, 0x1000000, 0x80010000, 0x5, 0x7, 0x6, 'team0\x00', 0x1, '$', 0x0, '', 0x6, 'team0\x00'}}, 0x47) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 23:44:36 executing program 0: ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) 23:44:36 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 23) [ 309.029167] vxfs: WRONG superblock magic 00000000 at 1 [ 309.039540] vxfs: WRONG superblock magic 00000000 at 8 [ 309.054213] vxfs: can't find superblock. 23:44:37 executing program 0: ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) 23:44:37 executing program 4: pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(r0, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:37 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) write$dsp(0xffffffffffffffff, &(0x7f0000000140)="dab631526f5a1dcf37b79c7cac5ec18e2ae00442d309f560897e77b7cd8817e359f47cd61310a0010266e32057320e0c596e31ca21f44d316b783e7a3401000000d9bf7890bd480fbd32ed50fd5ac103d78f5ba42dbb33ac569ce869fdbbdac830302d3d2e863b34f2ba2607457c67aedde7157f5f6c7584c9b4813c0dda8db0a6e9831dde23c97337e54b8671169ae7e032fa0787ba3e9d64a983edb27d0443326c513cfe684cc30e7335d6ebb4c8878d4218cc041e8b3c61b7dbe6599391843098dfb00f3b2bec3c428b336057c6d20d62296f9d59e4b2b6abf7524073fc97123fb55468334412ecc62c1581558dc4dc8d47387142", 0xf6) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000040)={0x47, 0x7d, 0x2, {0x0, 0x40, 0x6, 0x2, {0x80, 0x3, 0x7}, 0x1000000, 0x80010000, 0x5, 0x7, 0x6, 'team0\x00', 0x1, '$', 0x0, '', 0x6, 'team0\x00'}}, 0x47) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) write$dsp(0xffffffffffffffff, &(0x7f0000000140)="dab631526f5a1dcf37b79c7cac5ec18e2ae00442d309f560897e77b7cd8817e359f47cd61310a0010266e32057320e0c596e31ca21f44d316b783e7a3401000000d9bf7890bd480fbd32ed50fd5ac103d78f5ba42dbb33ac569ce869fdbbdac830302d3d2e863b34f2ba2607457c67aedde7157f5f6c7584c9b4813c0dda8db0a6e9831dde23c97337e54b8671169ae7e032fa0787ba3e9d64a983edb27d0443326c513cfe684cc30e7335d6ebb4c8878d4218cc041e8b3c61b7dbe6599391843098dfb00f3b2bec3c428b336057c6d20d62296f9d59e4b2b6abf7524073fc97123fb55468334412ecc62c1581558dc4dc8d47387142", 0xf6) (async) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000040)={0x47, 0x7d, 0x2, {0x0, 0x40, 0x6, 0x2, {0x80, 0x3, 0x7}, 0x1000000, 0x80010000, 0x5, 0x7, 0x6, 'team0\x00', 0x1, '$', 0x0, '', 0x6, 'team0\x00'}}, 0x47) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) 23:44:37 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) socketpair(0x2, 0x4, 0x200, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="002000800000ffff00000002431b00cc0067000004049078ac1414aa7f0000010094040000862700000003020a285bab13818e07f307090c41d6eb484b5d000edfdc3e30b5a33436025f5d6c891712ac1e00010a010100e00000027f00000100000000440c2683ac1e0001000000084410a5700000000900000000fffffff8862fffffffff070b6c8c1fa45f298d3d0607121df540bc14f7927b4973a015562d45b1020c5b37342a3eefa9616e4e441c1c43ffffffff00000009640101010000ffff6401010000000004440c2231ac1e0001000000090000"]}) [ 309.184062] FAULT_INJECTION: forcing a failure. [ 309.184062] name failslab, interval 1, probability 0, space 0, times 0 [ 309.188501] FAULT_INJECTION: forcing a failure. [ 309.188501] name failslab, interval 1, probability 0, space 0, times 0 [ 309.211021] CPU: 0 PID: 12185 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 309.218930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.228282] Call Trace: 23:44:37 executing program 4: pipe2$9p(0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) [ 309.230873] dump_stack+0x1b2/0x281 [ 309.234620] should_fail.cold+0x10a/0x149 [ 309.238771] should_failslab+0xd6/0x130 [ 309.242751] __kmalloc+0x2c1/0x400 [ 309.246294] ? kobject_get_path+0xb5/0x230 [ 309.250548] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 309.256003] kobject_get_path+0xb5/0x230 [ 309.260062] kobject_uevent_env+0x230/0xf30 [ 309.264504] ? internal_create_group+0x48f/0x710 [ 309.269269] lo_ioctl+0x11a6/0x1cd0 [ 309.272908] ? loop_set_status64+0xe0/0xe0 [ 309.277167] blkdev_ioctl+0x540/0x1830 23:44:37 executing program 4: pipe2$9p(0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) [ 309.281056] ? blkpg_ioctl+0x8d0/0x8d0 [ 309.284943] ? trace_hardirqs_on+0x10/0x10 [ 309.289179] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 309.294279] ? debug_check_no_obj_freed+0x2c0/0x680 [ 309.299295] block_ioctl+0xd9/0x120 [ 309.303006] ? blkdev_fallocate+0x3a0/0x3a0 [ 309.307320] do_vfs_ioctl+0x75a/0xff0 [ 309.311119] ? lock_acquire+0x170/0x3f0 [ 309.315090] ? ioctl_preallocate+0x1a0/0x1a0 [ 309.319492] ? __fget+0x265/0x3e0 [ 309.322934] ? do_vfs_ioctl+0xff0/0xff0 [ 309.326902] ? security_file_ioctl+0x83/0xb0 [ 309.331302] SyS_ioctl+0x7f/0xb0 [ 309.334662] ? do_vfs_ioctl+0xff0/0xff0 [ 309.338624] do_syscall_64+0x1d5/0x640 [ 309.342499] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 309.347676] RIP: 0033:0x7f8777d7aec7 [ 309.351376] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.359073] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 309.366327] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 309.373576] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 309.380842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 309.388090] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 309.395372] CPU: 1 PID: 12183 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 309.403259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.412608] Call Trace: [ 309.415194] dump_stack+0x1b2/0x281 [ 309.418826] should_fail.cold+0x10a/0x149 [ 309.422980] should_failslab+0xd6/0x130 [ 309.426956] kmem_cache_alloc_node_trace+0x25a/0x400 [ 309.432069] __kmalloc_node_track_caller+0x38/0x70 [ 309.436995] __alloc_skb+0x96/0x510 [ 309.440623] kobject_uevent_env+0x882/0xf30 [ 309.444947] lo_ioctl+0x11a6/0x1cd0 [ 309.448574] ? loop_set_status64+0xe0/0xe0 [ 309.450187] vxfs: WRONG superblock magic 00000000 at 1 [ 309.452806] blkdev_ioctl+0x540/0x1830 [ 309.452817] ? blkpg_ioctl+0x8d0/0x8d0 [ 309.452830] ? trace_hardirqs_on+0x10/0x10 [ 309.459006] vxfs: WRONG superblock magic 00000000 at 8 [ 309.461997] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 309.462010] ? debug_check_no_obj_freed+0x2c0/0x680 [ 309.462024] block_ioctl+0xd9/0x120 [ 309.473038] vxfs: can't find superblock. [ 309.475388] ? blkdev_fallocate+0x3a0/0x3a0 [ 309.475399] do_vfs_ioctl+0x75a/0xff0 [ 309.475410] ? lock_acquire+0x170/0x3f0 [ 309.475419] ? ioctl_preallocate+0x1a0/0x1a0 [ 309.475430] ? __fget+0x265/0x3e0 [ 309.475439] ? do_vfs_ioctl+0xff0/0xff0 [ 309.475451] ? security_file_ioctl+0x83/0xb0 [ 309.475460] SyS_ioctl+0x7f/0xb0 [ 309.475467] ? do_vfs_ioctl+0xff0/0xff0 [ 309.475478] do_syscall_64+0x1d5/0x640 23:44:37 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 22) 23:44:37 executing program 4: pipe2$9p(0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:37 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) socketpair(0x2, 0x4, 0x200, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="002000800000ffff00000002431b00cc0067000004049078ac1414aa7f0000010094040000862700000003020a285bab13818e07f307090c41d6eb484b5d000edfdc3e30b5a33436025f5d6c891712ac1e00010a010100e00000027f00000100000000440c2683ac1e0001000000084410a5700000000900000000fffffff8862fffffffff070b6c8c1fa45f298d3d0607121df540bc14f7927b4973a015562d45b1020c5b37342a3eefa9616e4e441c1c43ffffffff00000009640101010000ffff6401010000000004440c2231ac1e0001000000090000"]}) 23:44:37 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x141000, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) 23:44:37 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) write$dsp(0xffffffffffffffff, &(0x7f0000000140)="dab631526f5a1dcf37b79c7cac5ec18e2ae00442d309f560897e77b7cd8817e359f47cd61310a0010266e32057320e0c596e31ca21f44d316b783e7a3401000000d9bf7890bd480fbd32ed50fd5ac103d78f5ba42dbb33ac569ce869fdbbdac830302d3d2e863b34f2ba2607457c67aedde7157f5f6c7584c9b4813c0dda8db0a6e9831dde23c97337e54b8671169ae7e032fa0787ba3e9d64a983edb27d0443326c513cfe684cc30e7335d6ebb4c8878d4218cc041e8b3c61b7dbe6599391843098dfb00f3b2bec3c428b336057c6d20d62296f9d59e4b2b6abf7524073fc97123fb55468334412ecc62c1581558dc4dc8d47387142", 0xf6) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000040)={0x47, 0x7d, 0x2, {0x0, 0x40, 0x6, 0x2, {0x80, 0x3, 0x7}, 0x1000000, 0x80010000, 0x5, 0x7, 0x6, 'team0\x00', 0x1, '$', 0x0, '', 0x6, 'team0\x00'}}, 0x47) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) write$dsp(0xffffffffffffffff, &(0x7f0000000140)="dab631526f5a1dcf37b79c7cac5ec18e2ae00442d309f560897e77b7cd8817e359f47cd61310a0010266e32057320e0c596e31ca21f44d316b783e7a3401000000d9bf7890bd480fbd32ed50fd5ac103d78f5ba42dbb33ac569ce869fdbbdac830302d3d2e863b34f2ba2607457c67aedde7157f5f6c7584c9b4813c0dda8db0a6e9831dde23c97337e54b8671169ae7e032fa0787ba3e9d64a983edb27d0443326c513cfe684cc30e7335d6ebb4c8878d4218cc041e8b3c61b7dbe6599391843098dfb00f3b2bec3c428b336057c6d20d62296f9d59e4b2b6abf7524073fc97123fb55468334412ecc62c1581558dc4dc8d47387142", 0xf6) (async) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000040)={0x47, 0x7d, 0x2, {0x0, 0x40, 0x6, 0x2, {0x80, 0x3, 0x7}, 0x1000000, 0x80010000, 0x5, 0x7, 0x6, 'team0\x00', 0x1, '$', 0x0, '', 0x6, 'team0\x00'}}, 0x47) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) [ 309.475493] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 309.475502] RIP: 0033:0x7fdc42060ec7 [ 309.541365] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.549057] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 309.556310] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 309.563554] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 309.570801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 309.578074] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 309.615985] vxfs: WRONG superblock magic 00000000 at 1 [ 309.636183] vxfs: WRONG superblock magic 00000000 at 8 [ 309.641489] vxfs: can't find superblock. [ 309.682805] FAULT_INJECTION: forcing a failure. [ 309.682805] name failslab, interval 1, probability 0, space 0, times 0 [ 309.694441] CPU: 0 PID: 12219 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 309.702351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.711703] Call Trace: [ 309.714288] dump_stack+0x1b2/0x281 [ 309.717899] should_fail.cold+0x10a/0x149 [ 309.722031] should_failslab+0xd6/0x130 [ 309.725992] kmem_cache_alloc_node+0x263/0x410 [ 309.730564] __alloc_skb+0x5c/0x510 [ 309.734272] kobject_uevent_env+0x882/0xf30 [ 309.738580] lo_ioctl+0x11a6/0x1cd0 [ 309.742197] ? loop_set_status64+0xe0/0xe0 [ 309.746413] blkdev_ioctl+0x540/0x1830 [ 309.750277] ? blkpg_ioctl+0x8d0/0x8d0 [ 309.754141] ? trace_hardirqs_on+0x10/0x10 [ 309.758378] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 309.763544] ? debug_check_no_obj_freed+0x2c0/0x680 [ 309.768551] block_ioctl+0xd9/0x120 [ 309.772159] ? blkdev_fallocate+0x3a0/0x3a0 [ 309.776463] do_vfs_ioctl+0x75a/0xff0 [ 309.780259] ? lock_acquire+0x170/0x3f0 [ 309.784224] ? ioctl_preallocate+0x1a0/0x1a0 [ 309.788628] ? __fget+0x265/0x3e0 [ 309.792072] ? do_vfs_ioctl+0xff0/0xff0 [ 309.796026] ? security_file_ioctl+0x83/0xb0 [ 309.800415] SyS_ioctl+0x7f/0xb0 [ 309.803778] ? do_vfs_ioctl+0xff0/0xff0 [ 309.807731] do_syscall_64+0x1d5/0x640 [ 309.811621] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 309.816794] RIP: 0033:0x7f8777d7aec7 [ 309.820515] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.828210] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 309.835536] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 309.842801] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 309.850051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 309.857300] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 309.869752] vxfs: WRONG superblock magic 00000000 at 1 [ 309.875518] vxfs: WRONG superblock magic 00000000 at 8 23:44:37 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 24) 23:44:37 executing program 4: pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(r0, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:37 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) socketpair(0x2, 0x4, 0x200, &(0x7f0000000000)) 23:44:37 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x141000, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) 23:44:37 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0x0, 0x2, 0xfff, 0x2}, 0x9, 0x8}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1540, 0x0) 23:44:37 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 23) [ 309.881093] vxfs: can't find superblock. 23:44:37 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000880)) 23:44:37 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x141000, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) 23:44:37 executing program 4: pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(r0, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:37 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0x0, 0x2, 0xfff, 0x2}, 0x9, 0x8}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1540, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0x0, 0x2, 0xfff, 0x2}, 0x9, 0x8}) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1540, 0x0) (async) 23:44:37 executing program 4: pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(r0, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) [ 309.973385] FAULT_INJECTION: forcing a failure. [ 309.973385] name failslab, interval 1, probability 0, space 0, times 0 [ 310.009556] CPU: 0 PID: 12244 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 23:44:37 executing program 4: pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, 0x0, 0x0) write$P9_RREAD(r0, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) [ 310.017466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.026825] Call Trace: [ 310.029416] dump_stack+0x1b2/0x281 [ 310.033045] should_fail.cold+0x10a/0x149 [ 310.037195] should_failslab+0xd6/0x130 [ 310.041168] kmem_cache_alloc_node_trace+0x25a/0x400 [ 310.046365] __kmalloc_node_track_caller+0x38/0x70 [ 310.051304] __alloc_skb+0x96/0x510 [ 310.054970] kobject_uevent_env+0x882/0xf30 [ 310.059303] lo_ioctl+0x11a6/0x1cd0 [ 310.062938] ? loop_set_status64+0xe0/0xe0 [ 310.067176] blkdev_ioctl+0x540/0x1830 [ 310.071064] ? blkpg_ioctl+0x8d0/0x8d0 [ 310.074948] ? trace_hardirqs_on+0x10/0x10 [ 310.079273] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 310.084370] ? debug_check_no_obj_freed+0x2c0/0x680 [ 310.089390] block_ioctl+0xd9/0x120 [ 310.093016] ? blkdev_fallocate+0x3a0/0x3a0 [ 310.097329] do_vfs_ioctl+0x75a/0xff0 [ 310.101114] ? lock_acquire+0x170/0x3f0 [ 310.105069] ? ioctl_preallocate+0x1a0/0x1a0 [ 310.109457] ? __fget+0x265/0x3e0 [ 310.112896] ? do_vfs_ioctl+0xff0/0xff0 [ 310.116858] ? security_file_ioctl+0x83/0xb0 [ 310.121259] SyS_ioctl+0x7f/0xb0 [ 310.124625] ? do_vfs_ioctl+0xff0/0xff0 [ 310.128587] do_syscall_64+0x1d5/0x640 [ 310.132459] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 310.137645] RIP: 0033:0x7f8777d7aec7 [ 310.141333] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.149020] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 310.156286] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 310.163626] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 310.170960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 310.178210] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 310.205804] FAULT_INJECTION: forcing a failure. [ 310.205804] name failslab, interval 1, probability 0, space 0, times 0 [ 310.206598] vxfs: WRONG superblock magic 00000000 at 1 [ 310.223019] vxfs: WRONG superblock magic 00000000 at 8 [ 310.229755] vxfs: can't find superblock. [ 310.234454] CPU: 0 PID: 12249 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 310.242338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.251674] Call Trace: [ 310.254245] dump_stack+0x1b2/0x281 [ 310.257853] should_fail.cold+0x10a/0x149 [ 310.262080] should_failslab+0xd6/0x130 [ 310.266035] kmem_cache_alloc_node_trace+0x25a/0x400 [ 310.271129] __kmalloc_node_track_caller+0x38/0x70 [ 310.276050] __alloc_skb+0x96/0x510 [ 310.279658] kobject_uevent_env+0x882/0xf30 [ 310.283971] lo_ioctl+0x11a6/0x1cd0 [ 310.287575] ? loop_set_status64+0xe0/0xe0 [ 310.291962] blkdev_ioctl+0x540/0x1830 [ 310.295827] ? blkpg_ioctl+0x8d0/0x8d0 [ 310.299701] ? trace_hardirqs_on+0x10/0x10 [ 310.303914] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 310.308992] ? debug_check_no_obj_freed+0x2c0/0x680 [ 310.314087] block_ioctl+0xd9/0x120 [ 310.317702] ? blkdev_fallocate+0x3a0/0x3a0 [ 310.322138] do_vfs_ioctl+0x75a/0xff0 [ 310.325937] ? lock_acquire+0x170/0x3f0 [ 310.329905] ? ioctl_preallocate+0x1a0/0x1a0 [ 310.334404] ? __fget+0x265/0x3e0 [ 310.338368] ? do_vfs_ioctl+0xff0/0xff0 [ 310.342326] ? security_file_ioctl+0x83/0xb0 [ 310.346728] SyS_ioctl+0x7f/0xb0 [ 310.350164] ? do_vfs_ioctl+0xff0/0xff0 [ 310.354145] do_syscall_64+0x1d5/0x640 [ 310.358020] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 310.363301] RIP: 0033:0x7fdc42060ec7 [ 310.367007] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.374702] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 310.381954] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 310.389206] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 310.396453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 310.403707] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 310.426996] vxfs: WRONG superblock magic 00000000 at 1 [ 310.437609] vxfs: WRONG superblock magic 00000000 at 8 [ 310.442918] vxfs: can't find superblock. 23:44:38 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 25) 23:44:38 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0x0, 0x2, 0xfff, 0x2}, 0x9, 0x8}) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1540, 0x0) 23:44:38 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) 23:44:38 executing program 4: pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, 0x0, 0x0) write$P9_RREAD(r0, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:38 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) 23:44:38 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 24) 23:44:38 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x400000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000000000006e000000fffffeff0200000001000000000020397500000008000000ac020000d43e0000ffffffffc30000007d0f0000000800005b000000bb0b000003000000010100000000000009000000780b000003000000810000000000002006000000f3090000ed000000a60c000081ffffff4700000001000100010000000800000000020000520000001b00000000000000090000000400f8c4516d2446b71f00000400000002000000040000005f0b0000"]) 23:44:38 executing program 1: ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000003c0)=0x1) 23:44:38 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) 23:44:38 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async, rerun: 32) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x400000) (rerun: 32) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000000000006e000000fffffeff0200000001000000000020397500000008000000ac020000d43e0000ffffffffc30000007d0f0000000800005b000000bb0b000003000000010100000000000009000000780b000003000000810000000000002006000000f3090000ed000000a60c000081ffffff4700000001000100010000000800000000020000520000001b00000000000000090000000400f8c4516d2446b71f00000400000002000000040000005f0b0000"]) [ 310.621392] FAULT_INJECTION: forcing a failure. [ 310.621392] name failslab, interval 1, probability 0, space 0, times 0 [ 310.652028] CPU: 0 PID: 12284 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 310.659944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.669296] Call Trace: 23:44:38 executing program 4: pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, 0x0, 0x0) write$P9_RREAD(r0, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:38 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x400000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000000000006e000000fffffeff0200000001000000000020397500000008000000ac020000d43e0000ffffffffc30000007d0f0000000800005b000000bb0b000003000000010100000000000009000000780b000003000000810000000000002006000000f3090000ed000000a60c000081ffffff4700000001000100010000000800000000020000520000001b00000000000000090000000400f8c4516d2446b71f00000400000002000000040000005f0b0000"]) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x400000) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000000000006e000000fffffeff0200000001000000000020397500000008000000ac020000d43e0000ffffffffc30000007d0f0000000800005b000000bb0b000003000000010100000000000009000000780b000003000000810000000000002006000000f3090000ed000000a60c000081ffffff4700000001000100010000000800000000020000520000001b00000000000000090000000400f8c4516d2446b71f00000400000002000000040000005f0b0000"]) (async) [ 310.671883] dump_stack+0x1b2/0x281 [ 310.675514] should_fail.cold+0x10a/0x149 [ 310.679666] should_failslab+0xd6/0x130 [ 310.683645] kmem_cache_alloc_node+0x263/0x410 [ 310.688233] __alloc_skb+0x5c/0x510 [ 310.691868] kobject_uevent_env+0x882/0xf30 [ 310.696199] lo_ioctl+0x11a6/0x1cd0 [ 310.699830] ? loop_set_status64+0xe0/0xe0 [ 310.704067] blkdev_ioctl+0x540/0x1830 [ 310.707951] ? blkpg_ioctl+0x8d0/0x8d0 [ 310.711832] ? trace_hardirqs_on+0x10/0x10 [ 310.716071] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 310.721178] ? debug_check_no_obj_freed+0x2c0/0x680 [ 310.726199] block_ioctl+0xd9/0x120 [ 310.729826] ? blkdev_fallocate+0x3a0/0x3a0 [ 310.734145] do_vfs_ioctl+0x75a/0xff0 [ 310.737940] ? lock_acquire+0x170/0x3f0 [ 310.741901] ? ioctl_preallocate+0x1a0/0x1a0 [ 310.746292] ? __fget+0x265/0x3e0 [ 310.750170] ? do_vfs_ioctl+0xff0/0xff0 [ 310.754124] ? security_file_ioctl+0x83/0xb0 [ 310.758514] SyS_ioctl+0x7f/0xb0 [ 310.761866] ? do_vfs_ioctl+0xff0/0xff0 [ 310.765924] do_syscall_64+0x1d5/0x640 [ 310.769796] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 310.774992] RIP: 0033:0x7f8777d7aec7 [ 310.778787] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.786479] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 310.793747] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 310.800997] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 310.808257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 310.815628] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 310.842989] FAULT_INJECTION: forcing a failure. [ 310.842989] name failslab, interval 1, probability 0, space 0, times 0 [ 310.854394] vxfs: WRONG superblock magic 00000000 at 1 [ 310.860094] CPU: 0 PID: 12297 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 310.867979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.874123] vxfs: WRONG superblock magic 00000000 at 8 [ 310.877329] Call Trace: [ 310.877347] dump_stack+0x1b2/0x281 [ 310.877362] should_fail.cold+0x10a/0x149 [ 310.877375] should_failslab+0xd6/0x130 [ 310.877387] kmem_cache_alloc_node+0x263/0x410 [ 310.877398] __alloc_skb+0x5c/0x510 [ 310.877411] kobject_uevent_env+0x882/0xf30 [ 310.877428] lo_ioctl+0x11a6/0x1cd0 [ 310.882780] vxfs: can't find superblock. [ 310.885285] ? loop_set_status64+0xe0/0xe0 [ 310.885300] blkdev_ioctl+0x540/0x1830 [ 310.885310] ? blkpg_ioctl+0x8d0/0x8d0 [ 310.885320] ? trace_hardirqs_on+0x10/0x10 [ 310.885335] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 310.885344] ? debug_check_no_obj_freed+0x2c0/0x680 [ 310.885358] block_ioctl+0xd9/0x120 [ 310.885368] ? blkdev_fallocate+0x3a0/0x3a0 [ 310.951321] do_vfs_ioctl+0x75a/0xff0 [ 310.955105] ? lock_acquire+0x170/0x3f0 [ 310.959075] ? ioctl_preallocate+0x1a0/0x1a0 [ 310.963464] ? __fget+0x265/0x3e0 [ 310.966900] ? do_vfs_ioctl+0xff0/0xff0 [ 310.970862] ? security_file_ioctl+0x83/0xb0 [ 310.975262] SyS_ioctl+0x7f/0xb0 [ 310.978611] ? do_vfs_ioctl+0xff0/0xff0 [ 310.982565] do_syscall_64+0x1d5/0x640 [ 310.986435] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 310.991607] RIP: 0033:0x7fdc42060ec7 [ 310.995316] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.003029] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 311.010348] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 311.017604] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 311.024869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 311.032123] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 311.043568] vxfs: WRONG superblock magic 00000000 at 1 [ 311.050440] vxfs: WRONG superblock magic 00000000 at 8 [ 311.062149] vxfs: can't find superblock. 23:44:38 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 26) 23:44:38 executing program 4: pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:38 executing program 5: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x4000004) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 23:44:38 executing program 1: ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000003c0)=0x1) 23:44:38 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) 23:44:38 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 25) 23:44:39 executing program 4: pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:39 executing program 1: ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000003c0)=0x1) 23:44:39 executing program 5: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x4000004) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 23:44:39 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) [ 311.194821] FAULT_INJECTION: forcing a failure. [ 311.194821] name failslab, interval 1, probability 0, space 0, times 0 [ 311.206766] CPU: 0 PID: 12336 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 311.214673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.224027] Call Trace: [ 311.226623] dump_stack+0x1b2/0x281 [ 311.230260] should_fail.cold+0x10a/0x149 [ 311.234407] should_failslab+0xd6/0x130 [ 311.238384] kmem_cache_alloc_node_trace+0x25a/0x400 23:44:39 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) [ 311.243497] __kmalloc_node_track_caller+0x38/0x70 [ 311.248429] __alloc_skb+0x96/0x510 [ 311.252064] kobject_uevent_env+0x882/0xf30 [ 311.256400] lo_ioctl+0x11a6/0x1cd0 [ 311.260030] ? loop_set_status64+0xe0/0xe0 [ 311.264288] blkdev_ioctl+0x540/0x1830 [ 311.268176] ? blkpg_ioctl+0x8d0/0x8d0 [ 311.272064] ? trace_hardirqs_on+0x10/0x10 [ 311.276302] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 311.281409] ? debug_check_no_obj_freed+0x2c0/0x680 [ 311.286432] block_ioctl+0xd9/0x120 [ 311.290054] ? blkdev_fallocate+0x3a0/0x3a0 23:44:39 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) [ 311.294376] do_vfs_ioctl+0x75a/0xff0 [ 311.298179] ? lock_acquire+0x170/0x3f0 [ 311.302149] ? ioctl_preallocate+0x1a0/0x1a0 [ 311.306555] ? __fget+0x265/0x3e0 [ 311.310005] ? do_vfs_ioctl+0xff0/0xff0 [ 311.313986] ? security_file_ioctl+0x83/0xb0 [ 311.318389] SyS_ioctl+0x7f/0xb0 [ 311.321843] ? do_vfs_ioctl+0xff0/0xff0 [ 311.325815] do_syscall_64+0x1d5/0x640 [ 311.329703] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 311.334883] RIP: 0033:0x7f8777d7aec7 [ 311.338584] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.346284] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 311.353540] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 311.360799] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 311.368054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 311.375307] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 311.400684] FAULT_INJECTION: forcing a failure. [ 311.400684] name failslab, interval 1, probability 0, space 0, times 0 [ 311.410504] vxfs: WRONG superblock magic 00000000 at 1 [ 311.412363] CPU: 0 PID: 12333 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 311.421491] vxfs: WRONG superblock magic 00000000 at 8 [ 311.425194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.425198] Call Trace: [ 311.425214] dump_stack+0x1b2/0x281 [ 311.425230] should_fail.cold+0x10a/0x149 [ 311.434518] vxfs: can't find superblock. [ 311.439836] should_failslab+0xd6/0x130 [ 311.439850] kmem_cache_alloc_node_trace+0x25a/0x400 [ 311.439865] __kmalloc_node_track_caller+0x38/0x70 [ 311.439878] __alloc_skb+0x96/0x510 [ 311.471935] kobject_uevent_env+0x882/0xf30 [ 311.476357] lo_ioctl+0x11a6/0x1cd0 [ 311.479975] ? loop_set_status64+0xe0/0xe0 [ 311.484195] blkdev_ioctl+0x540/0x1830 [ 311.488129] ? blkpg_ioctl+0x8d0/0x8d0 [ 311.492002] ? trace_hardirqs_on+0x10/0x10 [ 311.496227] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 311.501319] ? debug_check_no_obj_freed+0x2c0/0x680 [ 311.506434] block_ioctl+0xd9/0x120 [ 311.510056] ? blkdev_fallocate+0x3a0/0x3a0 [ 311.514364] do_vfs_ioctl+0x75a/0xff0 [ 311.518145] ? lock_acquire+0x170/0x3f0 [ 311.522099] ? ioctl_preallocate+0x1a0/0x1a0 [ 311.526485] ? __fget+0x265/0x3e0 [ 311.529915] ? do_vfs_ioctl+0xff0/0xff0 [ 311.533871] ? security_file_ioctl+0x83/0xb0 [ 311.538258] SyS_ioctl+0x7f/0xb0 [ 311.541619] ? do_vfs_ioctl+0xff0/0xff0 [ 311.545582] do_syscall_64+0x1d5/0x640 [ 311.549453] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 311.554620] RIP: 0033:0x7fdc42060ec7 [ 311.558308] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.565997] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 311.573251] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 311.580505] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 311.587773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 311.595041] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 311.606606] vxfs: WRONG superblock magic 00000000 at 1 [ 311.612337] vxfs: WRONG superblock magic 00000000 at 8 [ 311.617799] vxfs: can't find superblock. 23:44:39 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 27) 23:44:39 executing program 4: pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:39 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) 23:44:39 executing program 0: pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:39 executing program 5: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x4000004) (async) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 23:44:39 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 26) 23:44:39 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) 23:44:39 executing program 0: pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, 0x0, 0x0) write$P9_RREAD(r0, &(0x7f0000000040)={0xff, 0x75, 0x2, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:39 executing program 4: pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(r0, 0x0, 0x0) 23:44:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dvmrp0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00000000b5019f5c0000000000000201000008000c0004000000a3413034ff7f0000b912141b01f3a3e4b086b9e5590bedf50150b8691bafe462034c2cbda0f926d8d1957d88da8bcfff00ec5a0cb51a56593543b0efb2663f0000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dvmrp0\x00'}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x5000) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) [ 311.750209] FAULT_INJECTION: forcing a failure. [ 311.750209] name failslab, interval 1, probability 0, space 0, times 0 [ 311.784886] CPU: 1 PID: 12369 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 311.792803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.802163] Call Trace: [ 311.804749] dump_stack+0x1b2/0x281 [ 311.808391] should_fail.cold+0x10a/0x149 [ 311.812547] should_failslab+0xd6/0x130 [ 311.816523] kmem_cache_alloc_node_trace+0x25a/0x400 [ 311.821633] __kmalloc_node_track_caller+0x38/0x70 [ 311.826567] __alloc_skb+0x96/0x510 [ 311.830197] kobject_uevent_env+0x882/0xf30 [ 311.834528] lo_ioctl+0x11a6/0x1cd0 [ 311.838155] ? loop_set_status64+0xe0/0xe0 [ 311.842396] blkdev_ioctl+0x540/0x1830 [ 311.846283] ? blkpg_ioctl+0x8d0/0x8d0 [ 311.850168] ? trace_hardirqs_on+0x10/0x10 [ 311.854403] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 311.859515] ? debug_check_no_obj_freed+0x2c0/0x680 [ 311.864626] block_ioctl+0xd9/0x120 [ 311.868251] ? blkdev_fallocate+0x3a0/0x3a0 [ 311.872572] do_vfs_ioctl+0x75a/0xff0 [ 311.876457] ? lock_acquire+0x170/0x3f0 [ 311.880427] ? ioctl_preallocate+0x1a0/0x1a0 [ 311.884841] ? __fget+0x265/0x3e0 [ 311.888293] ? do_vfs_ioctl+0xff0/0xff0 [ 311.892267] ? security_file_ioctl+0x83/0xb0 [ 311.896677] SyS_ioctl+0x7f/0xb0 23:44:39 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) 23:44:39 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) [ 311.900039] ? do_vfs_ioctl+0xff0/0xff0 [ 311.904017] do_syscall_64+0x1d5/0x640 [ 311.907908] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 311.913115] RIP: 0033:0x7f8777d7aec7 [ 311.916828] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.924530] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 311.931805] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 311.939072] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 311.946339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 311.953695] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 311.969374] FAULT_INJECTION: forcing a failure. [ 311.969374] name failslab, interval 1, probability 0, space 0, times 0 [ 311.979888] vxfs: WRONG superblock magic 00000000 at 1 [ 311.981231] CPU: 1 PID: 12375 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 311.991242] vxfs: WRONG superblock magic 00000000 at 8 [ 311.993779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.993784] Call Trace: [ 311.993805] dump_stack+0x1b2/0x281 [ 311.993818] should_fail.cold+0x10a/0x149 [ 312.003722] vxfs: can't find superblock. [ 312.008456] should_failslab+0xd6/0x130 [ 312.008469] kmem_cache_alloc_node_trace+0x25a/0x400 [ 312.008481] __kmalloc_node_track_caller+0x38/0x70 [ 312.008492] __alloc_skb+0x96/0x510 [ 312.008506] kobject_uevent_env+0x882/0xf30 [ 312.008525] lo_ioctl+0x11a6/0x1cd0 [ 312.008539] ? loop_set_status64+0xe0/0xe0 [ 312.052554] blkdev_ioctl+0x540/0x1830 [ 312.056437] ? blkpg_ioctl+0x8d0/0x8d0 [ 312.060314] ? trace_hardirqs_on+0x10/0x10 [ 312.064538] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 312.069649] ? debug_check_no_obj_freed+0x2c0/0x680 [ 312.074660] block_ioctl+0xd9/0x120 [ 312.078281] ? blkdev_fallocate+0x3a0/0x3a0 [ 312.082601] do_vfs_ioctl+0x75a/0xff0 [ 312.086394] ? lock_acquire+0x170/0x3f0 [ 312.090381] ? ioctl_preallocate+0x1a0/0x1a0 [ 312.094794] ? __fget+0x265/0x3e0 [ 312.098241] ? do_vfs_ioctl+0xff0/0xff0 [ 312.102209] ? security_file_ioctl+0x83/0xb0 [ 312.106615] SyS_ioctl+0x7f/0xb0 [ 312.109982] ? do_vfs_ioctl+0xff0/0xff0 [ 312.113942] do_syscall_64+0x1d5/0x640 [ 312.117834] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 312.123010] RIP: 0033:0x7fdc42060ec7 [ 312.126724] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.134441] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 312.141698] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 312.148952] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 312.156208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 312.163469] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 312.196375] vxfs: WRONG superblock magic 00000000 at 1 [ 312.210862] vxfs: WRONG superblock magic 00000000 at 8 [ 312.217490] vxfs: can't find superblock. 23:44:40 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 28) 23:44:40 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) 23:44:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dvmrp0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00000000b5019f5c0000000000000201000008000c0004000000a3413034ff7f0000b912141b01f3a3e4b086b9e5590bedf50150b8691bafe462034c2cbda0f926d8d1957d88da8bcfff00ec5a0cb51a56593543b0efb2663f0000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dvmrp0\x00'}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x5000) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dvmrp0\x00'}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r1) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00000000b5019f5c0000000000000201000008000c0004000000a3413034ff7f0000b912141b01f3a3e4b086b9e5590bedf50150b8691bafe462034c2cbda0f926d8d1957d88da8bcfff00ec5a0cb51a56593543b0efb2663f0000000000"], 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dvmrp0\x00'}) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x5000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) 23:44:40 executing program 4: pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(r0, 0x0, 0x0) 23:44:40 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000003c0)=0x1) 23:44:40 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 27) 23:44:40 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000003c0)=0x1) 23:44:40 executing program 4: pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(r0, 0x0, 0x0) 23:44:40 executing program 0: ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000003c0)=0x1) [ 312.363835] FAULT_INJECTION: forcing a failure. [ 312.363835] name failslab, interval 1, probability 0, space 0, times 0 [ 312.395164] CPU: 1 PID: 12414 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 312.403085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:44:40 executing program 0: ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000003c0)=0x1) 23:44:40 executing program 0: ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000003c0)=0x1) [ 312.412443] Call Trace: [ 312.415034] dump_stack+0x1b2/0x281 [ 312.418663] should_fail.cold+0x10a/0x149 [ 312.422816] should_failslab+0xd6/0x130 [ 312.426788] kmem_cache_alloc_node+0x263/0x410 [ 312.431369] __alloc_skb+0x5c/0x510 [ 312.434993] kobject_uevent_env+0x882/0xf30 [ 312.439318] lo_ioctl+0x11a6/0x1cd0 [ 312.442950] ? loop_set_status64+0xe0/0xe0 [ 312.447186] blkdev_ioctl+0x540/0x1830 [ 312.451076] ? blkpg_ioctl+0x8d0/0x8d0 [ 312.454962] ? trace_hardirqs_on+0x10/0x10 [ 312.459197] ? _raw_spin_unlock_irqrestore+0x66/0xe0 23:44:40 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) [ 312.464306] ? debug_check_no_obj_freed+0x2c0/0x680 [ 312.469328] block_ioctl+0xd9/0x120 [ 312.472954] ? blkdev_fallocate+0x3a0/0x3a0 [ 312.477273] do_vfs_ioctl+0x75a/0xff0 [ 312.481073] ? lock_acquire+0x170/0x3f0 [ 312.485047] ? ioctl_preallocate+0x1a0/0x1a0 [ 312.489460] ? __fget+0x265/0x3e0 [ 312.492922] ? do_vfs_ioctl+0xff0/0xff0 [ 312.496927] ? security_file_ioctl+0x83/0xb0 [ 312.501333] SyS_ioctl+0x7f/0xb0 [ 312.504700] ? do_vfs_ioctl+0xff0/0xff0 [ 312.508677] do_syscall_64+0x1d5/0x640 [ 312.512572] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 312.517758] RIP: 0033:0x7fdc42060ec7 [ 312.521466] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.529173] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 312.536439] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 312.543705] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 312.551064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 312.558323] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 312.572599] FAULT_INJECTION: forcing a failure. [ 312.572599] name failslab, interval 1, probability 0, space 0, times 0 [ 312.575396] vxfs: WRONG superblock magic 00000000 at 1 [ 312.589940] vxfs: WRONG superblock magic 00000000 at 8 [ 312.595558] CPU: 0 PID: 12417 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 312.595757] vxfs: can't find superblock. [ 312.603453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.603458] Call Trace: [ 312.603475] dump_stack+0x1b2/0x281 [ 312.603492] should_fail.cold+0x10a/0x149 [ 312.627302] should_failslab+0xd6/0x130 [ 312.631282] kmem_cache_alloc_node_trace+0x25a/0x400 [ 312.636482] __kmalloc_node_track_caller+0x38/0x70 [ 312.641560] __alloc_skb+0x96/0x510 [ 312.645206] kobject_uevent_env+0x882/0xf30 [ 312.649551] lo_ioctl+0x11a6/0x1cd0 [ 312.653175] ? loop_set_status64+0xe0/0xe0 [ 312.657491] blkdev_ioctl+0x540/0x1830 [ 312.661422] ? blkpg_ioctl+0x8d0/0x8d0 [ 312.665305] ? trace_hardirqs_on+0x10/0x10 [ 312.669523] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 312.674609] ? debug_check_no_obj_freed+0x2c0/0x680 [ 312.679622] block_ioctl+0xd9/0x120 [ 312.683240] ? blkdev_fallocate+0x3a0/0x3a0 [ 312.687651] do_vfs_ioctl+0x75a/0xff0 [ 312.691436] ? lock_acquire+0x170/0x3f0 [ 312.695390] ? ioctl_preallocate+0x1a0/0x1a0 [ 312.699784] ? __fget+0x265/0x3e0 [ 312.703240] ? do_vfs_ioctl+0xff0/0xff0 [ 312.707209] ? security_file_ioctl+0x83/0xb0 [ 312.711598] SyS_ioctl+0x7f/0xb0 [ 312.714948] ? do_vfs_ioctl+0xff0/0xff0 [ 312.718910] do_syscall_64+0x1d5/0x640 [ 312.722777] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 312.727940] RIP: 0033:0x7f8777d7aec7 [ 312.731647] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.739331] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 312.746611] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 312.753868] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 23:44:40 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 29) 23:44:40 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) 23:44:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dvmrp0\x00'}) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00000000b5019f5c0000000000000201000008000c0004000000a3413034ff7f0000b912141b01f3a3e4b086b9e5590bedf50150b8691bafe462034c2cbda0f926d8d1957d88da8bcfff00ec5a0cb51a56593543b0efb2663f0000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dvmrp0\x00'}) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x5000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async, rerun: 64) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (rerun: 64) 23:44:40 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000003c0)=0x1) 23:44:40 executing program 4: pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(r0, &(0x7f0000000040)={0xff, 0x75, 0x0, {0xf4, "b99f22c0304d062ef2ee04fc93db6a6b5dc83d8935f2cb3719d604108d4c0b830a6dc02f878460bafb6a415d16cccd7a7fbf74dca786512c0c8b73e2ab636001eb25560ff9116cfc1e1422969b794ff624d5db7ff1426b24146812ff38743e4312f766b8dae40f0f18d23d35cb884b501077c8c2ac86931f5a3cfb39e19d7366e2393dd2ec45f1c48537aca0924dc8f714893fa325268ccdd42a044c09e10a328def0d47e42d2c687d8992168e43ba34500abf284294c31cafb85c2836ed5c82ca754c47a65f430652ed818abd5da65213a3a4b3354b819e817ef8498fa5fd533328df7e05dcfc3b6564603c4189626df3dba3ed"}}, 0xff) 23:44:40 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 28) [ 312.761116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 312.768364] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 312.787295] vxfs: WRONG superblock magic 00000000 at 1 [ 312.798270] vxfs: WRONG superblock magic 00000000 at 8 [ 312.803561] vxfs: can't find superblock. 23:44:40 executing program 4: pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(r0, &(0x7f0000000040)={0xb}, 0xb) 23:44:40 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x141000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) 23:44:40 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) [ 312.906922] FAULT_INJECTION: forcing a failure. [ 312.906922] name failslab, interval 1, probability 0, space 0, times 0 [ 312.928017] CPU: 1 PID: 12470 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 312.935940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.945292] Call Trace: [ 312.947884] dump_stack+0x1b2/0x281 [ 312.951522] should_fail.cold+0x10a/0x149 23:44:40 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) [ 312.955677] should_failslab+0xd6/0x130 [ 312.959667] kmem_cache_alloc_node_trace+0x25a/0x400 [ 312.964777] __kmalloc_node_track_caller+0x38/0x70 [ 312.969712] __alloc_skb+0x96/0x510 [ 312.973348] kobject_uevent_env+0x882/0xf30 [ 312.977677] lo_ioctl+0x11a6/0x1cd0 [ 312.981314] ? loop_set_status64+0xe0/0xe0 [ 312.985549] blkdev_ioctl+0x540/0x1830 [ 312.989436] ? blkpg_ioctl+0x8d0/0x8d0 [ 312.993327] ? trace_hardirqs_on+0x10/0x10 [ 312.997563] ? _raw_spin_unlock_irqrestore+0x66/0xe0 23:44:40 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) [ 313.002665] ? debug_check_no_obj_freed+0x2c0/0x680 [ 313.007687] block_ioctl+0xd9/0x120 [ 313.011325] ? blkdev_fallocate+0x3a0/0x3a0 [ 313.015646] do_vfs_ioctl+0x75a/0xff0 [ 313.019445] ? lock_acquire+0x170/0x3f0 [ 313.023416] ? ioctl_preallocate+0x1a0/0x1a0 [ 313.027825] ? __fget+0x265/0x3e0 [ 313.031276] ? do_vfs_ioctl+0xff0/0xff0 [ 313.035247] ? security_file_ioctl+0x83/0xb0 [ 313.039656] SyS_ioctl+0x7f/0xb0 [ 313.043014] ? do_vfs_ioctl+0xff0/0xff0 [ 313.046988] do_syscall_64+0x1d5/0x640 [ 313.050881] entry_SYSCALL_64_after_hwframe+0x46/0xbb 23:44:40 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)=0x1) [ 313.056322] RIP: 0033:0x7fdc42060ec7 [ 313.060026] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.067729] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 313.074995] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 313.082259] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 313.089524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 313.096791] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 313.119154] FAULT_INJECTION: forcing a failure. [ 313.119154] name failslab, interval 1, probability 0, space 0, times 0 [ 313.142681] CPU: 1 PID: 12471 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 313.150594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.154767] vxfs: WRONG superblock magic 00000000 at 1 [ 313.159944] Call Trace: [ 313.159963] dump_stack+0x1b2/0x281 [ 313.159975] should_fail.cold+0x10a/0x149 [ 313.159987] should_failslab+0xd6/0x130 [ 313.160000] kmem_cache_alloc_node+0x263/0x410 [ 313.160013] __alloc_skb+0x5c/0x510 [ 313.160026] kobject_uevent_env+0x882/0xf30 [ 313.160042] lo_ioctl+0x11a6/0x1cd0 [ 313.160053] ? loop_set_status64+0xe0/0xe0 [ 313.160067] blkdev_ioctl+0x540/0x1830 [ 313.169795] vxfs: WRONG superblock magic 00000000 at 8 [ 313.171519] ? blkpg_ioctl+0x8d0/0x8d0 [ 313.171531] ? trace_hardirqs_on+0x10/0x10 [ 313.171544] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 313.171555] ? debug_check_no_obj_freed+0x2c0/0x680 [ 313.175830] vxfs: can't find superblock. [ 313.179666] block_ioctl+0xd9/0x120 [ 313.179676] ? blkdev_fallocate+0x3a0/0x3a0 [ 313.179686] do_vfs_ioctl+0x75a/0xff0 [ 313.179697] ? lock_acquire+0x170/0x3f0 [ 313.247030] ? ioctl_preallocate+0x1a0/0x1a0 [ 313.251433] ? __fget+0x265/0x3e0 [ 313.254866] ? do_vfs_ioctl+0xff0/0xff0 [ 313.258824] ? security_file_ioctl+0x83/0xb0 [ 313.263343] SyS_ioctl+0x7f/0xb0 [ 313.266826] ? do_vfs_ioctl+0xff0/0xff0 [ 313.270794] do_syscall_64+0x1d5/0x640 [ 313.274678] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 313.279869] RIP: 0033:0x7f8777d7aec7 [ 313.283681] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.291392] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 313.298675] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 313.305934] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 23:44:41 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 30) 23:44:41 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@empty, @remote, 0x1, "0d360e4cf3874efe5a44b6d322d49d2b7617eb8ac6b8b6ca1996ae50b35793cd", 0x3, 0xd3e6, 0x3, 0x4}, 0x3c) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000080)) 23:44:41 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0) 23:44:41 executing program 4: pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f0000000680)={0xb}, 0xb) write$P9_RREAD(r0, &(0x7f0000000040)={0xb}, 0xb) 23:44:41 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000003c0)=0x1) 23:44:41 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 29) [ 313.313206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 313.320469] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 313.331303] vxfs: WRONG superblock magic 00000000 at 1 [ 313.337547] vxfs: WRONG superblock magic 00000000 at 8 [ 313.342893] vxfs: can't find superblock. 23:44:41 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000003c0)=0x1) 23:44:41 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@empty, @remote, 0x1, "0d360e4cf3874efe5a44b6d322d49d2b7617eb8ac6b8b6ca1996ae50b35793cd", 0x3, 0xd3e6, 0x3, 0x4}, 0x3c) (async) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000080)) [ 313.477472] FAULT_INJECTION: forcing a failure. [ 313.477472] name failslab, interval 1, probability 0, space 0, times 0 [ 313.500057] CPU: 0 PID: 12523 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 313.508055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.517418] Call Trace: [ 313.520023] dump_stack+0x1b2/0x281 [ 313.523665] should_fail.cold+0x10a/0x149 [ 313.527819] should_failslab+0xd6/0x130 [ 313.531796] kmem_cache_alloc_node+0x263/0x410 [ 313.536378] __alloc_skb+0x5c/0x510 [ 313.540009] kobject_uevent_env+0x882/0xf30 [ 313.544337] lo_ioctl+0x11a6/0x1cd0 [ 313.547963] ? loop_set_status64+0xe0/0xe0 [ 313.552196] blkdev_ioctl+0x540/0x1830 [ 313.556079] ? blkpg_ioctl+0x8d0/0x8d0 [ 313.559964] ? trace_hardirqs_on+0x10/0x10 [ 313.564221] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 313.569335] ? debug_check_no_obj_freed+0x2c0/0x680 [ 313.574356] block_ioctl+0xd9/0x120 23:44:41 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000003c0)=0x1) 23:44:41 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0) 23:44:41 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async, rerun: 64) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@empty, @remote, 0x1, "0d360e4cf3874efe5a44b6d322d49d2b7617eb8ac6b8b6ca1996ae50b35793cd", 0x3, 0xd3e6, 0x3, 0x4}, 0x3c) (rerun: 64) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000080)) 23:44:41 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0) [ 313.577983] ? blkdev_fallocate+0x3a0/0x3a0 [ 313.582393] do_vfs_ioctl+0x75a/0xff0 [ 313.586190] ? lock_acquire+0x170/0x3f0 [ 313.590162] ? ioctl_preallocate+0x1a0/0x1a0 [ 313.594569] ? __fget+0x265/0x3e0 [ 313.598020] ? do_vfs_ioctl+0xff0/0xff0 [ 313.601994] ? security_file_ioctl+0x83/0xb0 [ 313.606403] SyS_ioctl+0x7f/0xb0 [ 313.609864] ? do_vfs_ioctl+0xff0/0xff0 [ 313.613851] do_syscall_64+0x1d5/0x640 [ 313.617748] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 313.623024] RIP: 0033:0x7fdc42060ec7 [ 313.626734] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.634447] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 313.641796] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 313.649145] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 313.656411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 313.663664] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 313.679418] FAULT_INJECTION: forcing a failure. [ 313.679418] name failslab, interval 1, probability 0, space 0, times 0 [ 313.689378] vxfs: WRONG superblock magic 00000000 at 1 [ 313.691749] CPU: 1 PID: 12525 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 313.696261] vxfs: WRONG superblock magic 00000000 at 8 [ 313.703791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.703796] Call Trace: [ 313.703811] dump_stack+0x1b2/0x281 [ 313.703824] should_fail.cold+0x10a/0x149 [ 313.703839] should_failslab+0xd6/0x130 [ 313.711987] vxfs: can't find superblock. [ 313.718450] kmem_cache_alloc_node_trace+0x25a/0x400 [ 313.718463] __kmalloc_node_track_caller+0x38/0x70 [ 313.718473] __alloc_skb+0x96/0x510 [ 313.718487] kobject_uevent_env+0x882/0xf30 [ 313.718505] lo_ioctl+0x11a6/0x1cd0 [ 313.718516] ? loop_set_status64+0xe0/0xe0 [ 313.718528] blkdev_ioctl+0x540/0x1830 [ 313.718539] ? blkpg_ioctl+0x8d0/0x8d0 [ 313.770449] ? trace_hardirqs_on+0x10/0x10 [ 313.774673] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 313.779782] ? debug_check_no_obj_freed+0x2c0/0x680 [ 313.784794] block_ioctl+0xd9/0x120 [ 313.788406] ? blkdev_fallocate+0x3a0/0x3a0 [ 313.792725] do_vfs_ioctl+0x75a/0xff0 [ 313.796507] ? lock_acquire+0x170/0x3f0 [ 313.800461] ? ioctl_preallocate+0x1a0/0x1a0 [ 313.804851] ? __fget+0x265/0x3e0 [ 313.808284] ? do_vfs_ioctl+0xff0/0xff0 [ 313.812247] ? security_file_ioctl+0x83/0xb0 [ 313.816646] SyS_ioctl+0x7f/0xb0 [ 313.819990] ? do_vfs_ioctl+0xff0/0xff0 [ 313.823946] do_syscall_64+0x1d5/0x640 [ 313.827813] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 313.832981] RIP: 0033:0x7f8777d7aec7 [ 313.836665] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.844351] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 313.851610] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 313.858863] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 313.866117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 313.873365] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 23:44:41 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 31) 23:44:41 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$dsp(r0, &(0x7f0000000080)="f0c1ec120706bcf1ca7e1e1840b8b5dcf1b8bf95b9bd7cbb09423fbc01a7d2920a593e9655f04079696db77c15a9a40cd2927ad939de57544b32ed755abd5917e359b78556fc6b514a6b39aa7309aec6808834c36a", 0x55) 23:44:41 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000003c0)=0x1) 23:44:41 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)) 23:44:41 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000003c0)=0x1) [ 313.920880] vxfs: WRONG superblock magic 00000000 at 1 [ 313.944051] vxfs: WRONG superblock magic 00000000 at 8 [ 313.977433] vxfs: can't find superblock. [ 314.021981] FAULT_INJECTION: forcing a failure. [ 314.021981] name failslab, interval 1, probability 0, space 0, times 0 [ 314.033831] CPU: 0 PID: 12556 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 314.041714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.051060] Call Trace: [ 314.053646] dump_stack+0x1b2/0x281 [ 314.057258] should_fail.cold+0x10a/0x149 [ 314.061402] should_failslab+0xd6/0x130 [ 314.065359] kmem_cache_alloc_node+0x263/0x410 [ 314.069941] __alloc_skb+0x5c/0x510 [ 314.073551] kobject_uevent_env+0x882/0xf30 [ 314.077857] lo_ioctl+0x11a6/0x1cd0 [ 314.081553] ? loop_set_status64+0xe0/0xe0 [ 314.085788] blkdev_ioctl+0x540/0x1830 [ 314.089666] ? blkpg_ioctl+0x8d0/0x8d0 [ 314.093537] ? trace_hardirqs_on+0x10/0x10 [ 314.097781] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 314.102877] ? debug_check_no_obj_freed+0x2c0/0x680 [ 314.107895] block_ioctl+0xd9/0x120 [ 314.111501] ? blkdev_fallocate+0x3a0/0x3a0 [ 314.115804] do_vfs_ioctl+0x75a/0xff0 [ 314.119670] ? lock_acquire+0x170/0x3f0 [ 314.123644] ? ioctl_preallocate+0x1a0/0x1a0 [ 314.128051] ? __fget+0x265/0x3e0 [ 314.131494] ? do_vfs_ioctl+0xff0/0xff0 [ 314.135452] ? security_file_ioctl+0x83/0xb0 [ 314.139867] SyS_ioctl+0x7f/0xb0 [ 314.143225] ? do_vfs_ioctl+0xff0/0xff0 [ 314.147195] do_syscall_64+0x1d5/0x640 [ 314.151085] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 314.156413] RIP: 0033:0x7fdc42060ec7 [ 314.160111] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.167824] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 314.175085] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 314.182360] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 314.189699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 314.196960] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 23:44:42 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 30) 23:44:42 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$dsp(r0, &(0x7f0000000080)="f0c1ec120706bcf1ca7e1e1840b8b5dcf1b8bf95b9bd7cbb09423fbc01a7d2920a593e9655f04079696db77c15a9a40cd2927ad939de57544b32ed755abd5917e359b78556fc6b514a6b39aa7309aec6808834c36a", 0x55) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) write$dsp(r0, &(0x7f0000000080)="f0c1ec120706bcf1ca7e1e1840b8b5dcf1b8bf95b9bd7cbb09423fbc01a7d2920a593e9655f04079696db77c15a9a40cd2927ad939de57544b32ed755abd5917e359b78556fc6b514a6b39aa7309aec6808834c36a", 0x55) (async) 23:44:42 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f00000003c0)=0x1) 23:44:42 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0) 23:44:42 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)) 23:44:42 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 32) [ 314.223951] vxfs: WRONG superblock magic 00000000 at 1 [ 314.229589] vxfs: WRONG superblock magic 00000000 at 8 [ 314.236900] vxfs: can't find superblock. 23:44:42 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0) 23:44:42 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)) 23:44:42 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$dsp(r0, &(0x7f0000000080)="f0c1ec120706bcf1ca7e1e1840b8b5dcf1b8bf95b9bd7cbb09423fbc01a7d2920a593e9655f04079696db77c15a9a40cd2927ad939de57544b32ed755abd5917e359b78556fc6b514a6b39aa7309aec6808834c36a", 0x55) 23:44:42 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 23:44:42 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0) 23:44:42 executing program 4: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 314.367727] FAULT_INJECTION: forcing a failure. [ 314.367727] name failslab, interval 1, probability 0, space 0, times 0 [ 314.387610] CPU: 0 PID: 12586 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 314.395612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.404963] Call Trace: [ 314.407552] dump_stack+0x1b2/0x281 [ 314.411192] should_fail.cold+0x10a/0x149 [ 314.415359] should_failslab+0xd6/0x130 [ 314.419335] kmem_cache_alloc_node+0x263/0x410 [ 314.423910] __alloc_skb+0x5c/0x510 [ 314.427550] kobject_uevent_env+0x882/0xf30 [ 314.431876] lo_ioctl+0x11a6/0x1cd0 [ 314.435505] ? loop_set_status64+0xe0/0xe0 [ 314.439736] blkdev_ioctl+0x540/0x1830 [ 314.443626] ? blkpg_ioctl+0x8d0/0x8d0 [ 314.447511] ? trace_hardirqs_on+0x10/0x10 [ 314.451757] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 314.456864] ? debug_check_no_obj_freed+0x2c0/0x680 [ 314.461861] block_ioctl+0xd9/0x120 [ 314.465467] ? blkdev_fallocate+0x3a0/0x3a0 [ 314.469764] do_vfs_ioctl+0x75a/0xff0 [ 314.473543] ? lock_acquire+0x170/0x3f0 [ 314.477496] ? ioctl_preallocate+0x1a0/0x1a0 [ 314.481897] ? __fget+0x265/0x3e0 [ 314.485348] ? do_vfs_ioctl+0xff0/0xff0 [ 314.489311] ? security_file_ioctl+0x83/0xb0 [ 314.493715] SyS_ioctl+0x7f/0xb0 [ 314.497060] ? do_vfs_ioctl+0xff0/0xff0 [ 314.501012] do_syscall_64+0x1d5/0x640 [ 314.504907] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 314.510123] RIP: 0033:0x7f8777d7aec7 [ 314.513810] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.521494] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 314.528739] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 314.535990] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 314.543245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 314.550498] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 314.569978] FAULT_INJECTION: forcing a failure. [ 314.569978] name failslab, interval 1, probability 0, space 0, times 0 [ 314.589648] vxfs: WRONG superblock magic 00000000 at 1 [ 314.599128] CPU: 0 PID: 12589 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 314.607017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.607821] vxfs: WRONG superblock magic 00000000 at 8 [ 314.616374] Call Trace: [ 314.616393] dump_stack+0x1b2/0x281 [ 314.616407] should_fail.cold+0x10a/0x149 [ 314.616418] should_failslab+0xd6/0x130 [ 314.616431] kmem_cache_alloc_node_trace+0x25a/0x400 [ 314.616443] __kmalloc_node_track_caller+0x38/0x70 [ 314.616454] __alloc_skb+0x96/0x510 [ 314.616468] kobject_uevent_env+0x882/0xf30 [ 314.616486] lo_ioctl+0x11a6/0x1cd0 [ 314.616499] ? loop_set_status64+0xe0/0xe0 [ 314.616512] blkdev_ioctl+0x540/0x1830 [ 314.616523] ? blkpg_ioctl+0x8d0/0x8d0 [ 314.616533] ? trace_hardirqs_on+0x10/0x10 [ 314.616545] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 314.616556] ? debug_check_no_obj_freed+0x2c0/0x680 [ 314.616571] block_ioctl+0xd9/0x120 [ 314.616584] ? blkdev_fallocate+0x3a0/0x3a0 [ 314.616595] do_vfs_ioctl+0x75a/0xff0 [ 314.621856] vxfs: can't find superblock. [ 314.624421] ? lock_acquire+0x170/0x3f0 [ 314.703465] ? ioctl_preallocate+0x1a0/0x1a0 [ 314.707853] ? __fget+0x265/0x3e0 [ 314.711372] ? do_vfs_ioctl+0xff0/0xff0 [ 314.715326] ? security_file_ioctl+0x83/0xb0 [ 314.719712] SyS_ioctl+0x7f/0xb0 [ 314.723060] ? do_vfs_ioctl+0xff0/0xff0 [ 314.727010] do_syscall_64+0x1d5/0x640 [ 314.730880] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 314.736049] RIP: 0033:0x7fdc42060ec7 [ 314.739750] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.747433] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 314.754682] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 314.761940] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 23:44:42 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 31) 23:44:42 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)) 23:44:42 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x48300, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:42 executing program 4: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 23:44:42 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0) [ 314.769310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 314.776588] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 314.789117] vxfs: WRONG superblock magic 00000000 at 1 [ 314.794773] vxfs: WRONG superblock magic 00000000 at 8 [ 314.800426] vxfs: can't find superblock. 23:44:42 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 33) 23:44:42 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x48300, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x48300, 0x0) (async) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) (async) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) (async) 23:44:42 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0) 23:44:42 executing program 4: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 23:44:42 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)) [ 314.940506] FAULT_INJECTION: forcing a failure. [ 314.940506] name failslab, interval 1, probability 0, space 0, times 0 [ 314.973214] CPU: 0 PID: 12622 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 314.981129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:44:42 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0) 23:44:42 executing program 1: ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, 0x0) [ 314.990478] Call Trace: [ 314.997845] dump_stack+0x1b2/0x281 [ 315.001477] should_fail.cold+0x10a/0x149 [ 315.005625] should_failslab+0xd6/0x130 [ 315.009623] kmem_cache_alloc_node_trace+0x25a/0x400 [ 315.014729] __kmalloc_node_track_caller+0x38/0x70 [ 315.019653] __alloc_skb+0x96/0x510 [ 315.023280] kobject_uevent_env+0x882/0xf30 [ 315.027694] lo_ioctl+0x11a6/0x1cd0 [ 315.031320] ? loop_set_status64+0xe0/0xe0 [ 315.035554] blkdev_ioctl+0x540/0x1830 [ 315.039440] ? blkpg_ioctl+0x8d0/0x8d0 [ 315.043324] ? trace_hardirqs_on+0x10/0x10 [ 315.047559] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 315.052657] ? debug_check_no_obj_freed+0x2c0/0x680 [ 315.057666] block_ioctl+0xd9/0x120 [ 315.061286] ? blkdev_fallocate+0x3a0/0x3a0 [ 315.065589] do_vfs_ioctl+0x75a/0xff0 [ 315.069372] ? lock_acquire+0x170/0x3f0 [ 315.073325] ? ioctl_preallocate+0x1a0/0x1a0 [ 315.082157] ? __fget+0x265/0x3e0 [ 315.085587] ? do_vfs_ioctl+0xff0/0xff0 [ 315.089539] ? security_file_ioctl+0x83/0xb0 [ 315.093924] SyS_ioctl+0x7f/0xb0 [ 315.097268] ? do_vfs_ioctl+0xff0/0xff0 [ 315.101230] do_syscall_64+0x1d5/0x640 [ 315.105108] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 315.110287] RIP: 0033:0x7fdc42060ec7 [ 315.114016] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.121704] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 315.128958] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 315.136224] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 315.143481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 315.150809] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 315.170517] vxfs: WRONG superblock magic 00000000 at 1 [ 315.176021] FAULT_INJECTION: forcing a failure. [ 315.176021] name failslab, interval 1, probability 0, space 0, times 0 [ 315.176590] vxfs: WRONG superblock magic 00000000 at 8 [ 315.192597] vxfs: can't find superblock. [ 315.197551] CPU: 0 PID: 12621 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 315.205435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.214793] Call Trace: [ 315.217363] dump_stack+0x1b2/0x281 [ 315.220971] should_fail.cold+0x10a/0x149 [ 315.225118] should_failslab+0xd6/0x130 [ 315.229165] kmem_cache_alloc_node_trace+0x25a/0x400 [ 315.234253] __kmalloc_node_track_caller+0x38/0x70 [ 315.239159] __alloc_skb+0x96/0x510 [ 315.242789] kobject_uevent_env+0x882/0xf30 [ 315.247126] lo_ioctl+0x11a6/0x1cd0 [ 315.250835] ? loop_set_status64+0xe0/0xe0 [ 315.255058] blkdev_ioctl+0x540/0x1830 [ 315.258930] ? blkpg_ioctl+0x8d0/0x8d0 [ 315.262824] ? trace_hardirqs_on+0x10/0x10 [ 315.267040] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 315.272130] ? debug_check_no_obj_freed+0x2c0/0x680 [ 315.277127] block_ioctl+0xd9/0x120 [ 315.280730] ? blkdev_fallocate+0x3a0/0x3a0 [ 315.285034] do_vfs_ioctl+0x75a/0xff0 [ 315.288829] ? lock_acquire+0x170/0x3f0 [ 315.292782] ? ioctl_preallocate+0x1a0/0x1a0 [ 315.297343] ? __fget+0x265/0x3e0 [ 315.300774] ? do_vfs_ioctl+0xff0/0xff0 [ 315.304725] ? security_file_ioctl+0x83/0xb0 [ 315.309115] SyS_ioctl+0x7f/0xb0 [ 315.312461] ? do_vfs_ioctl+0xff0/0xff0 [ 315.316424] do_syscall_64+0x1d5/0x640 [ 315.320306] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 315.325473] RIP: 0033:0x7f8777d7aec7 [ 315.329159] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.336842] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 315.344088] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 315.351336] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 315.358584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 315.365832] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 315.403698] vxfs: WRONG superblock magic 00000000 at 1 [ 315.421962] vxfs: WRONG superblock magic 00000000 at 8 [ 315.427671] vxfs: can't find superblock. 23:44:43 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 32) 23:44:43 executing program 1: ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, 0x0) 23:44:43 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000003c0)) 23:44:43 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x48300, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) (async) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:43 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x48300, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:43 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 34) 23:44:43 executing program 1: ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, 0x0) 23:44:43 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x48300, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) [ 315.566246] FAULT_INJECTION: forcing a failure. [ 315.566246] name failslab, interval 1, probability 0, space 0, times 0 [ 315.579233] CPU: 0 PID: 12658 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 315.587136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.596573] Call Trace: [ 315.599170] dump_stack+0x1b2/0x281 [ 315.602809] should_fail.cold+0x10a/0x149 [ 315.606964] should_failslab+0xd6/0x130 [ 315.610959] kmem_cache_alloc_node_trace+0x25a/0x400 23:44:43 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x48300, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:43 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x48300, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) [ 315.616082] __kmalloc_node_track_caller+0x38/0x70 [ 315.621014] __alloc_skb+0x96/0x510 [ 315.624649] kobject_uevent_env+0x882/0xf30 [ 315.628983] lo_ioctl+0x11a6/0x1cd0 [ 315.632610] ? loop_set_status64+0xe0/0xe0 [ 315.636845] blkdev_ioctl+0x540/0x1830 [ 315.640729] ? blkpg_ioctl+0x8d0/0x8d0 [ 315.644708] ? trace_hardirqs_on+0x10/0x10 [ 315.649128] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 315.654232] ? debug_check_no_obj_freed+0x2c0/0x680 [ 315.659252] block_ioctl+0xd9/0x120 23:44:43 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) [ 315.662887] ? blkdev_fallocate+0x3a0/0x3a0 [ 315.667208] do_vfs_ioctl+0x75a/0xff0 [ 315.671006] ? lock_acquire+0x170/0x3f0 [ 315.674984] ? ioctl_preallocate+0x1a0/0x1a0 [ 315.679395] ? __fget+0x265/0x3e0 [ 315.682846] ? do_vfs_ioctl+0xff0/0xff0 [ 315.686840] ? security_file_ioctl+0x83/0xb0 [ 315.691245] SyS_ioctl+0x7f/0xb0 [ 315.694607] ? do_vfs_ioctl+0xff0/0xff0 [ 315.698578] do_syscall_64+0x1d5/0x640 [ 315.702487] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 315.707669] RIP: 0033:0x7fdc42060ec7 23:44:43 executing program 4: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) [ 315.711369] RSP: 002b:00007fdc409d5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.719070] RAX: ffffffffffffffda RBX: 00007fdc420aaa20 RCX: 00007fdc42060ec7 [ 315.726336] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 315.733601] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 315.740869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 315.748140] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 315.761688] FAULT_INJECTION: forcing a failure. [ 315.761688] name failslab, interval 1, probability 0, space 0, times 0 [ 315.782263] vxfs: WRONG superblock magic 00000000 at 1 [ 315.787696] CPU: 0 PID: 12659 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 315.790443] vxfs: WRONG superblock magic 00000000 at 8 [ 315.795606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.795611] Call Trace: [ 315.795630] dump_stack+0x1b2/0x281 [ 315.795644] should_fail.cold+0x10a/0x149 [ 315.795656] should_failslab+0xd6/0x130 [ 315.795670] kmem_cache_alloc_node_trace+0x25a/0x400 [ 315.795683] __kmalloc_node_track_caller+0x38/0x70 [ 315.795693] __alloc_skb+0x96/0x510 [ 315.795707] kobject_uevent_env+0x882/0xf30 [ 315.795724] lo_ioctl+0x11a6/0x1cd0 [ 315.795737] ? loop_set_status64+0xe0/0xe0 [ 315.795750] blkdev_ioctl+0x540/0x1830 [ 315.795760] ? blkpg_ioctl+0x8d0/0x8d0 [ 315.795769] ? trace_hardirqs_on+0x10/0x10 [ 315.795781] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 315.795791] ? debug_check_no_obj_freed+0x2c0/0x680 [ 315.795804] block_ioctl+0xd9/0x120 [ 315.795812] ? blkdev_fallocate+0x3a0/0x3a0 [ 315.795821] do_vfs_ioctl+0x75a/0xff0 [ 315.795830] ? lock_acquire+0x170/0x3f0 [ 315.795839] ? ioctl_preallocate+0x1a0/0x1a0 [ 315.795851] ? __fget+0x265/0x3e0 [ 315.795860] ? do_vfs_ioctl+0xff0/0xff0 [ 315.795871] ? security_file_ioctl+0x83/0xb0 [ 315.795880] SyS_ioctl+0x7f/0xb0 [ 315.795887] ? do_vfs_ioctl+0xff0/0xff0 [ 315.795898] do_syscall_64+0x1d5/0x640 [ 315.795911] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 315.795919] RIP: 0033:0x7f8777d7aec7 [ 315.795924] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.795934] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 315.795939] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 315.795945] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 315.795950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 315.795962] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 315.801444] vxfs: WRONG superblock magic 00000000 at 1 [ 315.860200] vxfs: can't find superblock. [ 315.876009] vxfs: WRONG superblock magic 00000000 at 8 [ 315.984705] vxfs: can't find superblock. 23:44:43 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 33) 23:44:43 executing program 4: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 23:44:43 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:43 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x48300, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:43 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0) 23:44:43 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 35) 23:44:43 executing program 4: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 23:44:44 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:44 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x48300, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) [ 316.132003] FAULT_INJECTION: forcing a failure. [ 316.132003] name failslab, interval 1, probability 0, space 0, times 0 [ 316.143830] CPU: 0 PID: 12699 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 316.151716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.161074] Call Trace: [ 316.163664] dump_stack+0x1b2/0x281 [ 316.167298] should_fail.cold+0x10a/0x149 [ 316.171454] should_failslab+0xd6/0x130 [ 316.175430] kmem_cache_alloc_node+0x263/0x410 23:44:44 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x48300, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:44 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) [ 316.180019] __alloc_skb+0x5c/0x510 [ 316.183653] kobject_uevent_env+0x882/0xf30 [ 316.187979] lo_ioctl+0x11a6/0x1cd0 [ 316.191609] ? loop_set_status64+0xe0/0xe0 [ 316.195851] blkdev_ioctl+0x540/0x1830 [ 316.199745] ? blkpg_ioctl+0x8d0/0x8d0 [ 316.203629] ? trace_hardirqs_on+0x10/0x10 [ 316.207866] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 316.212969] ? debug_check_no_obj_freed+0x2c0/0x680 [ 316.217998] block_ioctl+0xd9/0x120 [ 316.221632] ? blkdev_fallocate+0x3a0/0x3a0 [ 316.225959] do_vfs_ioctl+0x75a/0xff0 23:44:44 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x108001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x1f) [ 316.229755] ? lock_acquire+0x170/0x3f0 [ 316.233724] ? ioctl_preallocate+0x1a0/0x1a0 [ 316.238130] ? __fget+0x265/0x3e0 [ 316.241580] ? do_vfs_ioctl+0xff0/0xff0 [ 316.245552] ? security_file_ioctl+0x83/0xb0 [ 316.249956] SyS_ioctl+0x7f/0xb0 [ 316.253338] ? do_vfs_ioctl+0xff0/0xff0 [ 316.257316] do_syscall_64+0x1d5/0x640 [ 316.261213] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 316.266397] RIP: 0033:0x7f8777d7aec7 [ 316.270098] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.277800] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 316.285066] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 316.292336] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 316.299603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 316.306871] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 316.345456] FAULT_INJECTION: forcing a failure. [ 316.345456] name failslab, interval 1, probability 0, space 0, times 0 [ 316.364363] vxfs: WRONG superblock magic 00000000 at 1 [ 316.373195] CPU: 1 PID: 12701 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 316.381097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.390445] Call Trace: [ 316.393034] dump_stack+0x1b2/0x281 [ 316.396664] should_fail.cold+0x10a/0x149 [ 316.400814] should_failslab+0xd6/0x130 [ 316.404796] kmem_cache_alloc+0x28e/0x3c0 [ 316.408943] getname_flags+0xc8/0x550 [ 316.412746] SyS_mkdirat+0x83/0x270 [ 316.416373] ? SyS_mknod+0x30/0x30 [ 316.419903] ? fput_many+0xe/0x140 [ 316.423441] ? do_syscall_64+0x4c/0x640 [ 316.427416] ? SyS_mknod+0x30/0x30 [ 316.430955] do_syscall_64+0x1d5/0x640 [ 316.434846] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 316.440041] RIP: 0033:0x7fdc42060217 [ 316.443742] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 316.451442] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc42060217 [ 316.458706] RDX: 00000000000001ff RSI: 0000000020000440 RDI: 00000000ffffff9c [ 316.465971] RBP: 00007fdc409d61d0 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 316.473236] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000400 [ 316.480506] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 [ 316.488728] vxfs: WRONG superblock magic 00000000 at 8 [ 316.494020] vxfs: can't find superblock. 23:44:44 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 34) 23:44:44 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:44 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x108001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x1f) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x108001, 0x0) (async) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x1f) (async) 23:44:44 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0) 23:44:44 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:44 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 36) 23:44:44 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:44 executing program 0: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 23:44:44 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x108001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x1f) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x108001, 0x0) (async) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x1f) (async) 23:44:44 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0) [ 316.634803] FAULT_INJECTION: forcing a failure. [ 316.634803] name failslab, interval 1, probability 0, space 0, times 0 [ 316.644370] FAULT_INJECTION: forcing a failure. [ 316.644370] name failslab, interval 1, probability 0, space 0, times 0 23:44:44 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, 0x0) [ 316.676716] CPU: 1 PID: 12747 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 316.684619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.693977] Call Trace: [ 316.696568] dump_stack+0x1b2/0x281 [ 316.700191] should_fail.cold+0x10a/0x149 [ 316.704337] should_failslab+0xd6/0x130 [ 316.708313] kmem_cache_alloc+0x28e/0x3c0 [ 316.712463] getname_flags+0xc8/0x550 [ 316.716294] SyS_mkdirat+0x83/0x270 [ 316.719924] ? SyS_mknod+0x30/0x30 [ 316.723455] ? fput_many+0xe/0x140 [ 316.727005] ? do_syscall_64+0x4c/0x640 [ 316.730979] ? SyS_mknod+0x30/0x30 [ 316.734518] do_syscall_64+0x1d5/0x640 [ 316.738413] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 316.745437] RIP: 0033:0x7fdc42060217 [ 316.749136] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 316.757007] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc42060217 [ 316.764282] RDX: 00000000000001ff RSI: 0000000020000440 RDI: 00000000ffffff9c 23:44:44 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, 0x0) [ 316.771545] RBP: 00007fdc409d61d0 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 316.778803] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000400 [ 316.786060] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 [ 316.806781] CPU: 0 PID: 12746 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 316.814688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.824037] Call Trace: [ 316.826626] dump_stack+0x1b2/0x281 [ 316.830258] should_fail.cold+0x10a/0x149 [ 316.834412] should_failslab+0xd6/0x130 [ 316.838394] kmem_cache_alloc_trace+0x29a/0x3d0 [ 316.843064] ? kobj_ns_drop+0x80/0x80 [ 316.846905] call_usermodehelper_setup+0x73/0x2e0 [ 316.851750] kobject_uevent_env+0xc21/0xf30 [ 316.856084] lo_ioctl+0x11a6/0x1cd0 [ 316.859714] ? loop_set_status64+0xe0/0xe0 [ 316.863954] blkdev_ioctl+0x540/0x1830 [ 316.867844] ? blkpg_ioctl+0x8d0/0x8d0 [ 316.871729] ? trace_hardirqs_on+0x10/0x10 [ 316.875964] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 316.881066] ? debug_check_no_obj_freed+0x2c0/0x680 [ 316.886086] block_ioctl+0xd9/0x120 [ 316.889712] ? blkdev_fallocate+0x3a0/0x3a0 [ 316.894033] do_vfs_ioctl+0x75a/0xff0 [ 316.897832] ? lock_acquire+0x170/0x3f0 [ 316.901807] ? ioctl_preallocate+0x1a0/0x1a0 [ 316.906218] ? __fget+0x265/0x3e0 [ 316.909669] ? do_vfs_ioctl+0xff0/0xff0 [ 316.913639] ? security_file_ioctl+0x83/0xb0 [ 316.918044] SyS_ioctl+0x7f/0xb0 [ 316.921406] ? do_vfs_ioctl+0xff0/0xff0 [ 316.925378] do_syscall_64+0x1d5/0x640 [ 316.929270] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 316.934451] RIP: 0033:0x7f8777d7aec7 [ 316.938151] RSP: 002b:00007f87766eff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.945846] RAX: ffffffffffffffda RBX: 00007f8777dc4a20 RCX: 00007f8777d7aec7 [ 316.953092] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 316.960425] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f87766f01d0 [ 316.967790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 23:44:44 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 35) 23:44:44 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r1, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f00000000c0)) 23:44:44 executing program 0: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 23:44:44 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, 0x0) 23:44:44 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:44 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 37) [ 316.975044] R13: 0000000000000004 R14: 0000000020000540 R15: 0000000000000000 [ 316.991272] vxfs: WRONG superblock magic 00000000 at 1 [ 316.997686] vxfs: WRONG superblock magic 00000000 at 8 [ 317.006879] vxfs: can't find superblock. 23:44:45 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) [ 317.142038] FAULT_INJECTION: forcing a failure. [ 317.142038] name failslab, interval 1, probability 0, space 0, times 0 [ 317.157738] CPU: 0 PID: 12793 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 317.165647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.175098] Call Trace: [ 317.177729] dump_stack+0x1b2/0x281 [ 317.181368] should_fail.cold+0x10a/0x149 [ 317.185521] should_failslab+0xd6/0x130 [ 317.189501] kmem_cache_alloc+0x28e/0x3c0 [ 317.193660] __d_alloc+0x2a/0xa20 [ 317.197116] ? d_lookup+0x172/0x220 [ 317.200746] d_alloc+0x46/0x240 [ 317.204001] FAULT_INJECTION: forcing a failure. [ 317.204001] name failslab, interval 1, probability 0, space 0, times 0 [ 317.204023] __lookup_hash+0x101/0x270 [ 317.204040] filename_create+0x156/0x3f0 [ 317.223126] ? kern_path_mountpoint+0x40/0x40 [ 317.227620] SyS_mkdirat+0x95/0x270 [ 317.231238] ? SyS_mknod+0x30/0x30 [ 317.234758] ? fput_many+0xe/0x140 [ 317.238279] ? do_syscall_64+0x4c/0x640 [ 317.242237] ? SyS_mknod+0x30/0x30 [ 317.245766] do_syscall_64+0x1d5/0x640 [ 317.249637] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 317.254808] RIP: 0033:0x7fdc42060217 [ 317.258499] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 317.266192] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc42060217 [ 317.273438] RDX: 00000000000001ff RSI: 0000000020000440 RDI: 00000000ffffff9c [ 317.280690] RBP: 00007fdc409d61d0 R08: 0000000000000000 R09: 00007fdc409d61d0 23:44:45 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) (async) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)) (async) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r1, &(0x7f0000000100)=""/160, 0xa0) (async) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f00000000c0)) 23:44:45 executing program 0: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 23:44:45 executing program 1: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r1, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f00000000c0)) [ 317.287938] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000400 [ 317.295184] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 [ 317.302443] CPU: 1 PID: 12800 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 317.310326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.319674] Call Trace: [ 317.322260] dump_stack+0x1b2/0x281 [ 317.325893] should_fail.cold+0x10a/0x149 [ 317.330070] should_failslab+0xd6/0x130 [ 317.334050] kmem_cache_alloc+0x28e/0x3c0 [ 317.338199] getname_flags+0xc8/0x550 [ 317.342011] SyS_mkdirat+0x83/0x270 [ 317.345650] ? SyS_mknod+0x30/0x30 [ 317.349188] ? fput_many+0xe/0x140 [ 317.352726] ? do_syscall_64+0x4c/0x640 [ 317.356698] ? SyS_mknod+0x30/0x30 [ 317.360236] do_syscall_64+0x1d5/0x640 [ 317.364129] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 317.369399] RIP: 0033:0x7f8777d7a217 [ 317.373103] RSP: 002b:00007f87766eff88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 317.380812] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7a217 23:44:45 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:45 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 38) [ 317.388076] RDX: 00000000000001ff RSI: 0000000020000440 RDI: 00000000ffffff9c [ 317.395341] RBP: 00007f87766f01d0 R08: 0000000000000000 R09: 00007f87766f01d0 [ 317.402635] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000400 [ 317.409902] R13: 0000000020000440 R14: 00007f87766effe0 R15: 0000000020000580 23:44:45 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 36) 23:44:45 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:45 executing program 1: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r1, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f00000000c0)) 23:44:45 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:45 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) (async) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)) (async) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r1, &(0x7f0000000100)=""/160, 0xa0) (async) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f00000000c0)) [ 317.486869] FAULT_INJECTION: forcing a failure. [ 317.486869] name failslab, interval 1, probability 0, space 0, times 0 [ 317.499190] CPU: 0 PID: 12826 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 317.507110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.516462] Call Trace: [ 317.519058] dump_stack+0x1b2/0x281 [ 317.522690] should_fail.cold+0x10a/0x149 [ 317.526851] should_failslab+0xd6/0x130 [ 317.530829] kmem_cache_alloc+0x28e/0x3c0 [ 317.534973] ? ext4_sync_fs+0x7e0/0x7e0 [ 317.539036] ext4_alloc_inode+0x1a/0x640 [ 317.543094] ? ext4_sync_fs+0x7e0/0x7e0 [ 317.547065] alloc_inode+0x5d/0x170 [ 317.550707] new_inode+0x1d/0xf0 [ 317.554071] __ext4_new_inode+0x360/0x4eb0 [ 317.558300] ? kmem_cache_free+0x7c/0x2b0 [ 317.562446] ? putname+0xcd/0x110 [ 317.565897] ? SyS_mkdirat+0x95/0x270 [ 317.569695] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 317.575060] ? ext4_free_inode+0x1460/0x1460 [ 317.579487] ? lock_downgrade+0x740/0x740 [ 317.583640] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 317.588740] ? dquot_initialize_needed+0x240/0x240 [ 317.593116] FAULT_INJECTION: forcing a failure. [ 317.593116] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 317.593850] ext4_mkdir+0x2e4/0xbd0 [ 317.609255] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 317.613915] ? security_inode_mkdir+0xca/0x100 [ 317.618482] vfs_mkdir+0x463/0x6e0 [ 317.622006] SyS_mkdirat+0x1fd/0x270 [ 317.625706] ? SyS_mknod+0x30/0x30 [ 317.629225] ? fput_many+0xe/0x140 [ 317.632745] ? do_syscall_64+0x4c/0x640 [ 317.636700] ? SyS_mknod+0x30/0x30 [ 317.640222] do_syscall_64+0x1d5/0x640 [ 317.644095] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 317.649268] RIP: 0033:0x7fdc42060217 [ 317.652968] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 317.660658] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc42060217 [ 317.667908] RDX: 00000000000001ff RSI: 0000000020000440 RDI: 00000000ffffff9c [ 317.675166] RBP: 00007fdc409d61d0 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 317.682501] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000400 [ 317.689749] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 [ 317.697013] CPU: 1 PID: 12837 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 317.704891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.714244] Call Trace: [ 317.716833] dump_stack+0x1b2/0x281 [ 317.720463] should_fail.cold+0x10a/0x149 [ 317.724613] __alloc_pages_nodemask+0x22c/0x2720 [ 317.729370] ? kobject_uevent_env+0x274/0xf30 [ 317.733874] ? __lock_acquire+0x5fc/0x3f20 [ 317.738117] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 317.742971] ? blkdev_ioctl+0xf4/0x1830 [ 317.746949] ? blkpg_ioctl+0x8d0/0x8d0 [ 317.750834] ? trace_hardirqs_on+0x10/0x10 [ 317.755070] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 317.760183] cache_grow_begin+0x91/0x700 [ 317.764239] ? fs_reclaim_release+0xd0/0x110 [ 317.768647] ? check_preemption_disabled+0x35/0x240 [ 317.773662] cache_alloc_refill+0x273/0x350 [ 317.777986] kmem_cache_alloc+0x333/0x3c0 [ 317.782133] getname_flags+0xc8/0x550 [ 317.785932] SyS_mkdirat+0x83/0x270 [ 317.789559] ? SyS_mknod+0x30/0x30 [ 317.793090] ? fput_many+0xe/0x140 [ 317.796632] ? do_syscall_64+0x4c/0x640 [ 317.800603] ? SyS_mknod+0x30/0x30 [ 317.804139] do_syscall_64+0x1d5/0x640 [ 317.808031] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 317.813217] RIP: 0033:0x7f8777d7a217 [ 317.816919] RSP: 002b:00007f87766eff88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 317.824624] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7a217 23:44:45 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:45 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:45 executing program 1: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r1, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f00000000c0)) 23:44:45 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 23:44:45 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 39) [ 317.831893] RDX: 00000000000001ff RSI: 0000000020000440 RDI: 00000000ffffff9c [ 317.839158] RBP: 00007f87766f01d0 R08: 0000000000000000 R09: 00007f87766f01d0 [ 317.846421] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000400 [ 317.853687] R13: 0000000020000440 R14: 00007f87766effe0 R15: 0000000020000580 23:44:45 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:45 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) [ 317.934195] vxfs: WRONG superblock magic 00000000 at 1 [ 317.948761] vxfs: WRONG superblock magic 00000000 at 8 [ 317.965719] vxfs: can't find superblock. [ 317.998814] FAULT_INJECTION: forcing a failure. [ 317.998814] name failslab, interval 1, probability 0, space 0, times 0 [ 318.013732] CPU: 1 PID: 12869 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 318.021630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.030979] Call Trace: [ 318.033574] dump_stack+0x1b2/0x281 [ 318.037201] should_fail.cold+0x10a/0x149 [ 318.041352] should_failslab+0xd6/0x130 [ 318.045322] __kmalloc+0x2c1/0x400 [ 318.048857] ? ext4_find_extent+0x879/0xbc0 [ 318.053180] ext4_find_extent+0x879/0xbc0 [ 318.057329] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 318.062779] ext4_ext_map_blocks+0x19a/0x6b10 [ 318.067275] ? __lock_acquire+0x5fc/0x3f20 [ 318.071520] ? __lock_acquire+0x5fc/0x3f20 [ 318.075757] ? mark_buffer_dirty+0x95/0x480 [ 318.080074] ? trace_hardirqs_on+0x10/0x10 [ 318.084303] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 318.089661] ? ext4_find_delalloc_cluster+0x180/0x180 [ 318.094849] ? trace_hardirqs_on+0x10/0x10 [ 318.099080] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 318.103921] ? ext4_es_lookup_extent+0x321/0xac0 [ 318.108683] ? lock_acquire+0x170/0x3f0 [ 318.112653] ? lock_acquire+0x170/0x3f0 [ 318.116708] ? ext4_map_blocks+0x29f/0x1730 [ 318.121021] ext4_map_blocks+0xb19/0x1730 [ 318.125189] ? ext4_issue_zeroout+0x150/0x150 [ 318.129668] ? __ext4_new_inode+0x27c/0x4eb0 [ 318.134155] ext4_getblk+0x98/0x3f0 [ 318.137762] ? ext4_iomap_begin+0x7f0/0x7f0 [ 318.142064] ext4_bread+0x6c/0x1a0 [ 318.145589] ? ext4_getblk+0x3f0/0x3f0 [ 318.149460] ? dquot_initialize_needed+0x240/0x240 [ 318.154392] ext4_append+0x143/0x350 [ 318.158099] ext4_mkdir+0x4c9/0xbd0 [ 318.161707] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 318.166370] ? security_inode_mkdir+0xca/0x100 [ 318.170932] vfs_mkdir+0x463/0x6e0 [ 318.174448] SyS_mkdirat+0x1fd/0x270 [ 318.178144] ? SyS_mknod+0x30/0x30 [ 318.181671] ? fput_many+0xe/0x140 [ 318.185194] ? do_syscall_64+0x4c/0x640 [ 318.189161] ? SyS_mknod+0x30/0x30 [ 318.192686] do_syscall_64+0x1d5/0x640 23:44:46 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 37) 23:44:46 executing program 1: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f00000000c0)) 23:44:46 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 23:44:46 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:46 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) [ 318.196563] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 318.201738] RIP: 0033:0x7fdc42060217 [ 318.205426] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 318.213116] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc42060217 [ 318.220361] RDX: 00000000000001ff RSI: 0000000020000440 RDI: 00000000ffffff9c [ 318.227607] RBP: 00007fdc409d61d0 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 318.234864] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000400 [ 318.242118] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 [ 318.271795] vxfs: WRONG superblock magic 00000000 at 1 [ 318.300758] vxfs: WRONG superblock magic 00000000 at 8 [ 318.330533] vxfs: can't find superblock. 23:44:46 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) [ 318.350824] FAULT_INJECTION: forcing a failure. [ 318.350824] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 318.362733] CPU: 0 PID: 12889 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 318.370611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.379970] Call Trace: [ 318.382562] dump_stack+0x1b2/0x281 [ 318.386190] should_fail.cold+0x10a/0x149 [ 318.390344] __alloc_pages_nodemask+0x22c/0x2720 [ 318.395122] ? kobject_uevent_env+0x274/0xf30 [ 318.399600] ? __lock_acquire+0x5fc/0x3f20 [ 318.403818] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 318.408655] ? blkdev_ioctl+0xf4/0x1830 [ 318.412606] ? blkpg_ioctl+0x8d0/0x8d0 [ 318.416471] ? trace_hardirqs_on+0x10/0x10 [ 318.420682] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 318.425779] cache_grow_begin+0x91/0x700 [ 318.429830] ? fs_reclaim_release+0xd0/0x110 [ 318.434227] ? check_preemption_disabled+0x35/0x240 [ 318.439231] cache_alloc_refill+0x273/0x350 [ 318.443555] kmem_cache_alloc+0x333/0x3c0 [ 318.447692] getname_flags+0xc8/0x550 [ 318.451476] SyS_mkdirat+0x83/0x270 [ 318.455092] ? SyS_mknod+0x30/0x30 [ 318.458613] ? fput_many+0xe/0x140 [ 318.462267] ? do_syscall_64+0x4c/0x640 [ 318.466227] ? SyS_mknod+0x30/0x30 [ 318.469784] do_syscall_64+0x1d5/0x640 [ 318.473672] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 318.478841] RIP: 0033:0x7f8777d7a217 [ 318.482543] RSP: 002b:00007f87766eff88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 318.490237] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7a217 23:44:46 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:46 executing program 1: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f00000000c0)) 23:44:46 executing program 5: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40080) [ 318.497485] RDX: 00000000000001ff RSI: 0000000020000440 RDI: 00000000ffffff9c [ 318.504730] RBP: 00007f87766f01d0 R08: 0000000000000000 R09: 00007f87766f01d0 [ 318.511979] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000400 [ 318.519313] R13: 0000000020000440 R14: 00007f87766effe0 R15: 0000000020000580 [ 318.541238] vxfs: WRONG superblock magic 00000000 at 1 23:44:46 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 40) 23:44:46 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) [ 318.558963] vxfs: WRONG superblock magic 00000000 at 8 [ 318.581296] vxfs: can't find superblock. 23:44:46 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) [ 318.630985] FAULT_INJECTION: forcing a failure. [ 318.630985] name failslab, interval 1, probability 0, space 0, times 0 [ 318.642551] CPU: 0 PID: 12908 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 318.650450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.659806] Call Trace: [ 318.662394] dump_stack+0x1b2/0x281 [ 318.666025] should_fail.cold+0x10a/0x149 [ 318.670174] should_failslab+0xd6/0x130 [ 318.674149] kmem_cache_alloc+0x40/0x3c0 [ 318.678206] __es_insert_extent+0x338/0x1360 [ 318.682609] ? __es_shrink+0x8c0/0x8c0 [ 318.686493] ? lock_acquire+0x170/0x3f0 [ 318.690466] ? ext4_es_insert_extent+0x11f/0x530 [ 318.695224] ext4_es_insert_extent+0x1b9/0x530 [ 318.699806] ? ext4_es_find_delayed_extent_range+0x930/0x930 [ 318.705600] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 318.711062] ? ext4_es_find_delayed_extent_range+0x646/0x930 [ 318.716858] ext4_ext_map_blocks+0x1e2c/0x6b10 [ 318.721437] ? __lock_acquire+0x5fc/0x3f20 [ 318.725673] ? __lock_acquire+0x5fc/0x3f20 [ 318.729908] ? mark_buffer_dirty+0x95/0x480 [ 318.734231] ? trace_hardirqs_on+0x10/0x10 [ 318.738467] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 318.743831] ? ext4_find_delalloc_cluster+0x180/0x180 [ 318.749016] ? trace_hardirqs_on+0x10/0x10 [ 318.753251] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 318.758095] ? ext4_es_lookup_extent+0x321/0xac0 [ 318.762845] ? lock_acquire+0x170/0x3f0 [ 318.766819] ? lock_acquire+0x170/0x3f0 [ 318.770777] ? ext4_map_blocks+0x29f/0x1730 [ 318.775082] ext4_map_blocks+0xb19/0x1730 [ 318.779216] ? ext4_issue_zeroout+0x150/0x150 [ 318.783695] ? __ext4_new_inode+0x27c/0x4eb0 [ 318.788094] ext4_getblk+0x98/0x3f0 [ 318.791701] ? ext4_iomap_begin+0x7f0/0x7f0 [ 318.796015] ext4_bread+0x6c/0x1a0 [ 318.799533] ? ext4_getblk+0x3f0/0x3f0 [ 318.803396] ? dquot_initialize_needed+0x240/0x240 [ 318.808306] ext4_append+0x143/0x350 [ 318.811999] ext4_mkdir+0x4c9/0xbd0 [ 318.815610] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 318.820263] ? security_inode_mkdir+0xca/0x100 [ 318.824827] vfs_mkdir+0x463/0x6e0 [ 318.828409] SyS_mkdirat+0x1fd/0x270 [ 318.832104] ? SyS_mknod+0x30/0x30 [ 318.835621] ? fput_many+0xe/0x140 [ 318.839138] ? do_syscall_64+0x4c/0x640 [ 318.843090] ? SyS_mknod+0x30/0x30 [ 318.846623] do_syscall_64+0x1d5/0x640 [ 318.850495] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 318.855661] RIP: 0033:0x7fdc42060217 [ 318.859360] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 318.867049] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc42060217 [ 318.874306] RDX: 00000000000001ff RSI: 0000000020000440 RDI: 00000000ffffff9c [ 318.881555] RBP: 00007fdc409d61d0 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 318.888887] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000400 [ 318.896134] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 23:44:46 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 38) 23:44:46 executing program 5: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40080) 23:44:46 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:46 executing program 1: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f00000000c0)) 23:44:46 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) [ 318.943571] vxfs: WRONG superblock magic 00000000 at 1 [ 318.952823] vxfs: WRONG superblock magic 00000000 at 8 [ 318.959332] vxfs: can't find superblock. 23:44:46 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 41) 23:44:46 executing program 5: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40080) 23:44:46 executing program 1: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f00000000c0)) 23:44:46 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 23:44:46 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) [ 319.078351] FAULT_INJECTION: forcing a failure. [ 319.078351] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 319.090180] CPU: 0 PID: 12941 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 319.098059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.107551] Call Trace: [ 319.110145] dump_stack+0x1b2/0x281 [ 319.113777] should_fail.cold+0x10a/0x149 [ 319.117927] __alloc_pages_nodemask+0x22c/0x2720 [ 319.122681] ? kobject_uevent_env+0x274/0xf30 23:44:46 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) [ 319.127186] ? __lock_acquire+0x5fc/0x3f20 [ 319.131423] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 319.136270] ? blkdev_ioctl+0xf4/0x1830 [ 319.140244] ? blkpg_ioctl+0x8d0/0x8d0 [ 319.144127] ? trace_hardirqs_on+0x10/0x10 [ 319.148368] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 319.150827] FAULT_INJECTION: forcing a failure. [ 319.150827] name failslab, interval 1, probability 0, space 0, times 0 [ 319.153498] cache_grow_begin+0x91/0x700 [ 319.153509] ? fs_reclaim_release+0xd0/0x110 [ 319.153519] ? check_preemption_disabled+0x35/0x240 [ 319.153532] cache_alloc_refill+0x273/0x350 [ 319.182509] kmem_cache_alloc+0x333/0x3c0 [ 319.186639] getname_flags+0xc8/0x550 [ 319.190420] SyS_mkdirat+0x83/0x270 [ 319.194030] ? SyS_mknod+0x30/0x30 [ 319.197554] ? fput_many+0xe/0x140 [ 319.201071] ? do_syscall_64+0x4c/0x640 [ 319.205034] ? SyS_mknod+0x30/0x30 [ 319.208583] do_syscall_64+0x1d5/0x640 [ 319.212479] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 319.217651] RIP: 0033:0x7f8777d7a217 [ 319.221343] RSP: 002b:00007f87766eff88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 319.229034] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7a217 [ 319.236285] RDX: 00000000000001ff RSI: 0000000020000440 RDI: 00000000ffffff9c [ 319.243535] RBP: 00007f87766f01d0 R08: 0000000000000000 R09: 00007f87766f01d0 [ 319.250780] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000400 [ 319.258031] R13: 0000000020000440 R14: 00007f87766effe0 R15: 0000000020000580 [ 319.265379] CPU: 1 PID: 12946 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 319.273270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.282620] Call Trace: [ 319.285205] dump_stack+0x1b2/0x281 [ 319.288835] should_fail.cold+0x10a/0x149 [ 319.293072] should_failslab+0xd6/0x130 [ 319.297045] kmem_cache_alloc+0x40/0x3c0 [ 319.301108] __es_insert_extent+0x338/0x1360 [ 319.305514] ? __es_shrink+0x8c0/0x8c0 [ 319.309417] ? lock_acquire+0x170/0x3f0 [ 319.313386] ? ext4_es_insert_extent+0x11f/0x530 [ 319.318151] ext4_es_insert_extent+0x1b9/0x530 [ 319.322731] ? ext4_es_find_delayed_extent_range+0x930/0x930 [ 319.328524] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 319.333972] ? ext4_es_find_delayed_extent_range+0x646/0x930 [ 319.339774] ext4_ext_map_blocks+0x1e2c/0x6b10 [ 319.344356] ? __lock_acquire+0x5fc/0x3f20 [ 319.348594] ? __lock_acquire+0x5fc/0x3f20 [ 319.352832] ? mark_buffer_dirty+0x95/0x480 [ 319.357157] ? trace_hardirqs_on+0x10/0x10 [ 319.361388] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 319.366760] ? ext4_find_delalloc_cluster+0x180/0x180 [ 319.371946] ? trace_hardirqs_on+0x10/0x10 23:44:47 executing program 4: openat$dsp(0xffffffffffffff9c, 0x0, 0x1, 0x0) [ 319.376200] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 319.381041] ? ext4_es_lookup_extent+0x321/0xac0 [ 319.385792] ? lock_acquire+0x170/0x3f0 [ 319.389765] ? lock_acquire+0x170/0x3f0 [ 319.393734] ? ext4_map_blocks+0x29f/0x1730 [ 319.398144] ext4_map_blocks+0xb19/0x1730 [ 319.402302] ? ext4_issue_zeroout+0x150/0x150 [ 319.406795] ? __ext4_new_inode+0x27c/0x4eb0 [ 319.411404] ext4_getblk+0x98/0x3f0 [ 319.415117] ? ext4_iomap_begin+0x7f0/0x7f0 [ 319.419535] ext4_bread+0x6c/0x1a0 [ 319.423071] ? ext4_getblk+0x3f0/0x3f0 [ 319.426955] ? dquot_initialize_needed+0x240/0x240 [ 319.431888] ext4_append+0x143/0x350 [ 319.435700] ext4_mkdir+0x4c9/0xbd0 [ 319.439327] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 319.443997] ? security_inode_mkdir+0xca/0x100 [ 319.448578] vfs_mkdir+0x463/0x6e0 [ 319.452119] SyS_mkdirat+0x1fd/0x270 [ 319.455832] ? SyS_mknod+0x30/0x30 [ 319.459366] ? fput_many+0xe/0x140 [ 319.462902] ? do_syscall_64+0x4c/0x640 [ 319.466872] ? SyS_mknod+0x30/0x30 [ 319.470413] do_syscall_64+0x1d5/0x640 [ 319.474301] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 319.479481] RIP: 0033:0x7fdc42060217 [ 319.483186] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 319.490884] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc42060217 [ 319.498147] RDX: 00000000000001ff RSI: 0000000020000440 RDI: 00000000ffffff9c [ 319.505413] RBP: 00007fdc409d61d0 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 319.512692] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000400 [ 319.519960] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 23:44:47 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 39) 23:44:47 executing program 1: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f00000000c0)) 23:44:47 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 23:44:47 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) 23:44:47 executing program 4: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 23:44:47 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 42) [ 319.521228] vxfs: WRONG superblock magic 00000000 at 1 [ 319.529870] vxfs: WRONG superblock magic 00000000 at 1 [ 319.538273] vxfs: WRONG superblock magic 00000000 at 8 [ 319.543601] vxfs: can't find superblock. [ 319.548122] vxfs: WRONG superblock magic 00000000 at 8 [ 319.553449] vxfs: can't find superblock. 23:44:47 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) socket$inet(0x2, 0xe, 0x1f) 23:44:47 executing program 1: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f00000000c0)) 23:44:47 executing program 4: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f00000000c0)) 23:44:47 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) [ 319.674211] FAULT_INJECTION: forcing a failure. [ 319.674211] name failslab, interval 1, probability 0, space 0, times 0 [ 319.700446] FAULT_INJECTION: forcing a failure. [ 319.700446] name failslab, interval 1, probability 0, space 0, times 0 [ 319.717967] CPU: 1 PID: 12980 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 319.725870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.735222] Call Trace: [ 319.737807] dump_stack+0x1b2/0x281 [ 319.741438] should_fail.cold+0x10a/0x149 [ 319.745586] should_failslab+0xd6/0x130 [ 319.749563] __kmalloc+0x2c1/0x400 [ 319.753106] ? ext4_find_extent+0x879/0xbc0 [ 319.757425] ext4_find_extent+0x879/0xbc0 [ 319.761578] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 319.767029] ext4_ext_map_blocks+0x19a/0x6b10 23:44:47 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) socket$inet(0x2, 0xe, 0x1f) 23:44:47 executing program 1: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r1, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f00000000c0)) [ 319.771539] ? __lock_acquire+0x5fc/0x3f20 [ 319.775772] ? __lock_acquire+0x5fc/0x3f20 [ 319.780006] ? mark_buffer_dirty+0x95/0x480 [ 319.784326] ? trace_hardirqs_on+0x10/0x10 [ 319.788557] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 319.794090] ? ext4_find_delalloc_cluster+0x180/0x180 [ 319.799272] ? trace_hardirqs_on+0x10/0x10 [ 319.803504] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 319.808348] ? ext4_es_lookup_extent+0x321/0xac0 [ 319.813104] ? lock_acquire+0x170/0x3f0 [ 319.817081] ? lock_acquire+0x170/0x3f0 [ 319.821051] ? ext4_map_blocks+0x29f/0x1730 [ 319.825377] ext4_map_blocks+0xb19/0x1730 [ 319.829527] ? ext4_issue_zeroout+0x150/0x150 [ 319.834016] ? __ext4_new_inode+0x27c/0x4eb0 [ 319.838424] ext4_getblk+0x98/0x3f0 [ 319.842050] ? ext4_iomap_begin+0x7f0/0x7f0 [ 319.846379] ext4_bread+0x6c/0x1a0 [ 319.849919] ? ext4_getblk+0x3f0/0x3f0 [ 319.853806] ? dquot_initialize_needed+0x240/0x240 [ 319.858735] ext4_append+0x143/0x350 [ 319.862447] ext4_mkdir+0x4c9/0xbd0 [ 319.866076] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 319.870744] ? security_inode_mkdir+0xca/0x100 [ 319.875321] vfs_mkdir+0x463/0x6e0 [ 319.878857] SyS_mkdirat+0x1fd/0x270 [ 319.882568] ? SyS_mknod+0x30/0x30 [ 319.886102] ? fput_many+0xe/0x140 [ 319.889635] ? do_syscall_64+0x4c/0x640 [ 319.893605] ? SyS_mknod+0x30/0x30 [ 319.897144] do_syscall_64+0x1d5/0x640 [ 319.901040] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 319.906221] RIP: 0033:0x7f8777d7a217 [ 319.909924] RSP: 002b:00007f87766eff88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 319.917627] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7a217 [ 319.924892] RDX: 00000000000001ff RSI: 0000000020000440 RDI: 00000000ffffff9c [ 319.932151] RBP: 00007f87766f01d0 R08: 0000000000000000 R09: 00007f87766f01d0 [ 319.939413] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000400 [ 319.946681] R13: 0000000020000440 R14: 00007f87766effe0 R15: 0000000020000580 [ 319.959208] CPU: 1 PID: 12986 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 319.967094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.976439] Call Trace: [ 319.979027] dump_stack+0x1b2/0x281 [ 319.982659] should_fail.cold+0x10a/0x149 [ 319.986808] should_failslab+0xd6/0x130 [ 319.990779] kmem_cache_alloc+0x28e/0x3c0 [ 319.994924] ext4_mb_new_blocks+0x514/0x3db0 [ 319.999334] ? ext4_find_extent+0x6f7/0xbc0 [ 320.003650] ? ext4_ext_search_right+0x2bc/0xaa0 [ 320.008405] ? ext4_inode_to_goal_block+0x29a/0x3b0 [ 320.013778] ext4_ext_map_blocks+0x2845/0x6b10 [ 320.018370] ? __lock_acquire+0x5fc/0x3f20 [ 320.022609] ? mark_buffer_dirty+0x95/0x480 [ 320.026927] ? trace_hardirqs_on+0x10/0x10 [ 320.031169] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 320.036538] ? ext4_find_delalloc_cluster+0x180/0x180 [ 320.041729] ? trace_hardirqs_on+0x10/0x10 [ 320.045966] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 320.050812] ? ext4_es_lookup_extent+0x321/0xac0 [ 320.055567] ? lock_acquire+0x170/0x3f0 [ 320.059551] ext4_map_blocks+0x675/0x1730 [ 320.063710] ? ext4_issue_zeroout+0x150/0x150 [ 320.068200] ? __ext4_new_inode+0x27c/0x4eb0 [ 320.072610] ext4_getblk+0x98/0x3f0 [ 320.076237] ? ext4_iomap_begin+0x7f0/0x7f0 [ 320.080566] ext4_bread+0x6c/0x1a0 [ 320.084114] ? ext4_getblk+0x3f0/0x3f0 [ 320.087992] ? dquot_initialize_needed+0x240/0x240 [ 320.092919] ext4_append+0x143/0x350 [ 320.096632] ext4_mkdir+0x4c9/0xbd0 [ 320.100375] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 320.105050] ? security_inode_mkdir+0xca/0x100 [ 320.109635] vfs_mkdir+0x463/0x6e0 [ 320.111927] vxfs: WRONG superblock magic 00000000 at 1 [ 320.113176] SyS_mkdirat+0x1fd/0x270 [ 320.118958] vxfs: WRONG superblock magic 00000000 at 8 [ 320.122171] ? SyS_mknod+0x30/0x30 [ 320.122181] ? fput_many+0xe/0x140 [ 320.122194] ? do_syscall_64+0x4c/0x640 [ 320.138452] ? SyS_mknod+0x30/0x30 [ 320.141990] do_syscall_64+0x1d5/0x640 [ 320.142534] vxfs: can't find superblock. [ 320.145880] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 320.145888] RIP: 0033:0x7fdc42060217 [ 320.145893] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 320.145902] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc42060217 23:44:48 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 40) 23:44:48 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) socket$inet(0x2, 0xe, 0x1f) 23:44:48 executing program 1: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r1, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f00000000c0)) 23:44:48 executing program 4: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f00000000c0)) 23:44:48 executing program 0: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r1, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f00000000c0)) 23:44:48 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 43) [ 320.145907] RDX: 00000000000001ff RSI: 0000000020000440 RDI: 00000000ffffff9c [ 320.145912] RBP: 00007fdc409d61d0 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 320.145916] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000400 [ 320.145921] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 23:44:48 executing program 5: syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 23:44:48 executing program 1: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) 23:44:48 executing program 4: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f00000000c0)) 23:44:48 executing program 0: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r1, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f00000000c0)) [ 320.323121] FAULT_INJECTION: forcing a failure. [ 320.323121] name failslab, interval 1, probability 0, space 0, times 0 [ 320.359013] FAULT_INJECTION: forcing a failure. [ 320.359013] name failslab, interval 1, probability 0, space 0, times 0 [ 320.370396] CPU: 0 PID: 13029 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 320.378284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.387643] Call Trace: [ 320.390230] dump_stack+0x1b2/0x281 [ 320.393859] should_fail.cold+0x10a/0x149 [ 320.398007] should_failslab+0xd6/0x130 [ 320.401986] kmem_cache_alloc+0x40/0x3c0 [ 320.406050] __es_insert_extent+0x338/0x1360 [ 320.410474] ext4_es_insert_extent+0x1b9/0x530 [ 320.415057] ? ext4_es_find_delayed_extent_range+0x930/0x930 23:44:48 executing program 0: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r1, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f00000000c0)) 23:44:48 executing program 4: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) [ 320.420866] ext4_map_blocks+0x887/0x1730 [ 320.425014] ? ext4_issue_zeroout+0x150/0x150 [ 320.429509] ? __ext4_new_inode+0x27c/0x4eb0 [ 320.433926] ext4_getblk+0x98/0x3f0 [ 320.437550] ? ext4_iomap_begin+0x7f0/0x7f0 [ 320.441874] ext4_bread+0x6c/0x1a0 [ 320.445410] ? ext4_getblk+0x3f0/0x3f0 [ 320.449305] ? dquot_initialize_needed+0x240/0x240 [ 320.454234] ext4_append+0x143/0x350 [ 320.457936] ext4_mkdir+0x4c9/0xbd0 [ 320.461568] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 320.466317] ? security_inode_mkdir+0xca/0x100 [ 320.470894] vfs_mkdir+0x463/0x6e0 [ 320.474433] SyS_mkdirat+0x1fd/0x270 [ 320.478142] ? SyS_mknod+0x30/0x30 [ 320.481672] ? fput_many+0xe/0x140 [ 320.485208] ? do_syscall_64+0x4c/0x640 [ 320.489173] ? SyS_mknod+0x30/0x30 [ 320.492708] do_syscall_64+0x1d5/0x640 [ 320.496608] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 320.501798] RIP: 0033:0x7fdc42060217 [ 320.505501] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 320.513725] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc42060217 [ 320.520986] RDX: 00000000000001ff RSI: 0000000020000440 RDI: 00000000ffffff9c [ 320.528246] RBP: 00007fdc409d61d0 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 320.535620] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000400 [ 320.542878] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 [ 320.566702] CPU: 1 PID: 13030 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 320.574611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.583961] Call Trace: [ 320.586546] dump_stack+0x1b2/0x281 [ 320.587319] vxfs: WRONG superblock magic 00000000 at 1 [ 320.590172] should_fail.cold+0x10a/0x149 [ 320.590185] should_failslab+0xd6/0x130 [ 320.590198] __kmalloc+0x2c1/0x400 [ 320.595767] vxfs: WRONG superblock magic 00000000 at 8 [ 320.599600] ? ext4_find_extent+0x879/0xbc0 [ 320.599613] ext4_find_extent+0x879/0xbc0 [ 320.599627] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 320.603621] vxfs: can't find superblock. [ 320.607096] ext4_ext_map_blocks+0x19a/0x6b10 [ 320.607118] ? __lock_acquire+0x5fc/0x3f20 [ 320.607130] ? __lock_acquire+0x5fc/0x3f20 [ 320.607143] ? mark_buffer_dirty+0x95/0x480 [ 320.607151] ? trace_hardirqs_on+0x10/0x10 [ 320.607161] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 320.607172] ? ext4_find_delalloc_cluster+0x180/0x180 [ 320.662294] ? trace_hardirqs_on+0x10/0x10 [ 320.666529] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 320.671375] ? ext4_es_lookup_extent+0x321/0xac0 [ 320.676132] ? lock_acquire+0x170/0x3f0 [ 320.680105] ? lock_acquire+0x170/0x3f0 [ 320.684056] ? ext4_map_blocks+0x29f/0x1730 [ 320.688382] ext4_map_blocks+0xb19/0x1730 [ 320.692513] ? ext4_issue_zeroout+0x150/0x150 [ 320.696984] ? __ext4_new_inode+0x27c/0x4eb0 [ 320.701374] ext4_getblk+0x98/0x3f0 [ 320.704978] ? ext4_iomap_begin+0x7f0/0x7f0 [ 320.709283] ext4_bread+0x6c/0x1a0 [ 320.712806] ? ext4_getblk+0x3f0/0x3f0 [ 320.718242] ? dquot_initialize_needed+0x240/0x240 [ 320.723171] ext4_append+0x143/0x350 [ 320.726865] ext4_mkdir+0x4c9/0xbd0 [ 320.730472] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 320.735135] ? security_inode_mkdir+0xca/0x100 [ 320.739698] vfs_mkdir+0x463/0x6e0 [ 320.743219] SyS_mkdirat+0x1fd/0x270 [ 320.746918] ? SyS_mknod+0x30/0x30 [ 320.750433] ? fput_many+0xe/0x140 [ 320.753997] ? do_syscall_64+0x4c/0x640 [ 320.758004] ? SyS_mknod+0x30/0x30 [ 320.761535] do_syscall_64+0x1d5/0x640 [ 320.765403] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 320.770582] RIP: 0033:0x7f8777d7a217 [ 320.774272] RSP: 002b:00007f87766eff88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 320.781966] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7a217 [ 320.789220] RDX: 00000000000001ff RSI: 0000000020000440 RDI: 00000000ffffff9c [ 320.796571] RBP: 00007f87766f01d0 R08: 0000000000000000 R09: 00007f87766f01d0 [ 320.803825] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000400 [ 320.811077] R13: 0000000020000440 R14: 00007f87766effe0 R15: 0000000020000580 23:44:48 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 41) 23:44:48 executing program 5: syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) (async) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) 23:44:48 executing program 1: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) 23:44:48 executing program 4: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) 23:44:48 executing program 0: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r1, &(0x7f0000000100)=""/160, 0xa0) 23:44:48 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 44) [ 320.828019] vxfs: WRONG superblock magic 00000000 at 1 [ 320.839740] vxfs: WRONG superblock magic 00000000 at 8 [ 320.851848] vxfs: can't find superblock. 23:44:48 executing program 4: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) 23:44:48 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) 23:44:48 executing program 5: syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 23:44:48 executing program 0: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) 23:44:48 executing program 4: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) 23:44:48 executing program 1: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) [ 321.019457] FAULT_INJECTION: forcing a failure. [ 321.019457] name failslab, interval 1, probability 0, space 0, times 0 [ 321.050575] FAULT_INJECTION: forcing a failure. [ 321.050575] name failslab, interval 1, probability 0, space 0, times 0 [ 321.104095] CPU: 1 PID: 13082 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 321.112006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.121359] Call Trace: [ 321.123946] dump_stack+0x1b2/0x281 [ 321.127581] should_fail.cold+0x10a/0x149 [ 321.131737] should_failslab+0xd6/0x130 [ 321.135720] kmem_cache_alloc+0x28e/0x3c0 [ 321.139871] ext4_mb_new_blocks+0x514/0x3db0 [ 321.144447] ? ext4_find_extent+0x6f7/0xbc0 [ 321.148755] ? ext4_ext_search_right+0x2bc/0xaa0 [ 321.153514] ? ext4_inode_to_goal_block+0x29a/0x3b0 [ 321.158531] ext4_ext_map_blocks+0x2845/0x6b10 [ 321.163296] ? __lock_acquire+0x5fc/0x3f20 [ 321.167532] ? mark_buffer_dirty+0x95/0x480 [ 321.171847] ? trace_hardirqs_on+0x10/0x10 [ 321.176074] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 321.181517] ? ext4_find_delalloc_cluster+0x180/0x180 [ 321.186702] ? trace_hardirqs_on+0x10/0x10 [ 321.190933] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 321.195772] ? ext4_es_lookup_extent+0x321/0xac0 [ 321.200526] ? lock_acquire+0x170/0x3f0 [ 321.204508] ext4_map_blocks+0x675/0x1730 [ 321.208664] ? ext4_issue_zeroout+0x150/0x150 [ 321.213168] ? __ext4_new_inode+0x27c/0x4eb0 [ 321.217575] ext4_getblk+0x98/0x3f0 [ 321.221190] ? ext4_iomap_begin+0x7f0/0x7f0 [ 321.225505] ext4_bread+0x6c/0x1a0 [ 321.229042] ? ext4_getblk+0x3f0/0x3f0 [ 321.233035] ? dquot_initialize_needed+0x240/0x240 [ 321.237968] ext4_append+0x143/0x350 [ 321.241670] ext4_mkdir+0x4c9/0xbd0 [ 321.245307] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 321.249983] ? security_inode_mkdir+0xca/0x100 [ 321.254561] vfs_mkdir+0x463/0x6e0 [ 321.258091] SyS_mkdirat+0x1fd/0x270 [ 321.261790] ? SyS_mknod+0x30/0x30 [ 321.265318] ? fput_many+0xe/0x140 [ 321.268859] ? do_syscall_64+0x4c/0x640 [ 321.272828] ? SyS_mknod+0x30/0x30 [ 321.276452] do_syscall_64+0x1d5/0x640 [ 321.280343] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 321.285524] RIP: 0033:0x7fdc42060217 [ 321.289232] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 321.296925] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc42060217 [ 321.304192] RDX: 00000000000001ff RSI: 0000000020000440 RDI: 00000000ffffff9c [ 321.311456] RBP: 00007fdc409d61d0 R08: 0000000000000000 R09: 00007fdc409d61d0 [ 321.318713] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000400 [ 321.326077] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 [ 321.333351] CPU: 0 PID: 13087 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 321.341273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.350629] Call Trace: [ 321.353219] dump_stack+0x1b2/0x281 [ 321.356850] should_fail.cold+0x10a/0x149 [ 321.361004] should_failslab+0xd6/0x130 [ 321.364978] __kmalloc+0x2c1/0x400 [ 321.368513] ? ext4_find_extent+0x879/0xbc0 [ 321.372833] ext4_find_extent+0x879/0xbc0 [ 321.376988] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 321.382443] ext4_ext_map_blocks+0x19a/0x6b10 [ 321.386941] ? __lock_acquire+0x5fc/0x3f20 [ 321.391175] ? mark_buffer_dirty+0x95/0x480 [ 321.395488] ? trace_hardirqs_on+0x10/0x10 [ 321.399700] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 321.405044] ? ext4_find_delalloc_cluster+0x180/0x180 [ 321.410210] ? trace_hardirqs_on+0x10/0x10 [ 321.414430] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 321.419261] ? ext4_es_lookup_extent+0x321/0xac0 [ 321.423998] ? lock_acquire+0x170/0x3f0 [ 321.427956] ? lock_acquire+0x170/0x3f0 [ 321.431908] ? ext4_map_blocks+0x623/0x1730 [ 321.436211] ext4_map_blocks+0x675/0x1730 [ 321.440344] ? ext4_issue_zeroout+0x150/0x150 [ 321.444815] ? __ext4_new_inode+0x27c/0x4eb0 [ 321.449213] ext4_getblk+0x98/0x3f0 [ 321.452818] ? ext4_iomap_begin+0x7f0/0x7f0 [ 321.457122] ext4_bread+0x6c/0x1a0 [ 321.460639] ? ext4_getblk+0x3f0/0x3f0 [ 321.464511] ? dquot_initialize_needed+0x240/0x240 [ 321.469419] ext4_append+0x143/0x350 [ 321.473111] ext4_mkdir+0x4c9/0xbd0 [ 321.476719] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 321.481369] ? security_inode_mkdir+0xca/0x100 [ 321.486023] vfs_mkdir+0x463/0x6e0 [ 321.489542] SyS_mkdirat+0x1fd/0x270 [ 321.493235] ? SyS_mknod+0x30/0x30 [ 321.496757] ? fput_many+0xe/0x140 [ 321.500301] ? do_syscall_64+0x4c/0x640 [ 321.504266] ? SyS_mknod+0x30/0x30 [ 321.507792] do_syscall_64+0x1d5/0x640 [ 321.511665] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 321.516849] RIP: 0033:0x7f8777d7a217 [ 321.520537] RSP: 002b:00007f87766eff88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 321.528236] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7a217 [ 321.535586] RDX: 00000000000001ff RSI: 0000000020000440 RDI: 00000000ffffff9c [ 321.542838] RBP: 00007f87766f01d0 R08: 0000000000000000 R09: 00007f87766f01d0 23:44:49 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 42) 23:44:49 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000000)="cc255e618f81cd370a7189f9de307c605bbc00153c7b364eace65e068325104f83734a2ee776719091658be5537e1ac4c9e13c4b823c7ba2cae6b54da2eb4aa0f000845157aa79b741b852e04fe62a9679c7f05bd5d57454dc66825344b7b51b85863369d28d5c9a7180336147a37e5b466141d42a0381616141cd0cb98506a751ed368f9b9881fb669ecccd", 0x8c, 0x24008045, 0x0, 0x0) 23:44:49 executing program 4: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) 23:44:49 executing program 1: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) 23:44:49 executing program 0: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) 23:44:49 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 45) [ 321.550105] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000400 [ 321.557353] R13: 0000000020000440 R14: 00007f87766effe0 R15: 0000000020000580 23:44:49 executing program 4: read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) 23:44:49 executing program 0: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) 23:44:49 executing program 1: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) 23:44:49 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) sendto$phonet(0xffffffffffffffff, &(0x7f0000000000)="cc255e618f81cd370a7189f9de307c605bbc00153c7b364eace65e068325104f83734a2ee776719091658be5537e1ac4c9e13c4b823c7ba2cae6b54da2eb4aa0f000845157aa79b741b852e04fe62a9679c7f05bd5d57454dc66825344b7b51b85863369d28d5c9a7180336147a37e5b466141d42a0381616141cd0cb98506a751ed368f9b9881fb669ecccd", 0x8c, 0x24008045, 0x0, 0x0) [ 321.707108] FAULT_INJECTION: forcing a failure. [ 321.707108] name failslab, interval 1, probability 0, space 0, times 0 [ 321.738547] FAULT_INJECTION: forcing a failure. [ 321.738547] name failslab, interval 1, probability 0, space 0, times 0 [ 321.768422] CPU: 1 PID: 13129 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 321.776333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.785682] Call Trace: [ 321.788276] dump_stack+0x1b2/0x281 [ 321.791992] should_fail.cold+0x10a/0x149 [ 321.796140] should_failslab+0xd6/0x130 [ 321.800119] kmem_cache_alloc+0x28e/0x3c0 [ 321.804271] ext4_mb_new_blocks+0x514/0x3db0 [ 321.808680] ? ext4_find_extent+0x6f7/0xbc0 [ 321.812985] ? ext4_ext_search_right+0x2bc/0xaa0 [ 321.817724] ? ext4_inode_to_goal_block+0x29a/0x3b0 [ 321.822728] ext4_ext_map_blocks+0x2845/0x6b10 [ 321.827300] ? __lock_acquire+0x5fc/0x3f20 [ 321.831536] ? mark_buffer_dirty+0x95/0x480 [ 321.835846] ? trace_hardirqs_on+0x10/0x10 [ 321.840071] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 321.845424] ? ext4_find_delalloc_cluster+0x180/0x180 [ 321.850632] ? trace_hardirqs_on+0x10/0x10 [ 321.854861] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 321.859703] ? ext4_es_lookup_extent+0x321/0xac0 [ 321.864487] ? lock_acquire+0x170/0x3f0 [ 321.868474] ext4_map_blocks+0x675/0x1730 [ 321.872634] ? ext4_issue_zeroout+0x150/0x150 [ 321.877117] ? __ext4_new_inode+0x27c/0x4eb0 [ 321.881518] ext4_getblk+0x98/0x3f0 [ 321.885137] ? ext4_iomap_begin+0x7f0/0x7f0 [ 321.889453] ext4_bread+0x6c/0x1a0 [ 321.892991] ? ext4_getblk+0x3f0/0x3f0 [ 321.896878] ? dquot_initialize_needed+0x240/0x240 [ 321.901810] ext4_append+0x143/0x350 [ 321.905517] ext4_mkdir+0x4c9/0xbd0 [ 321.909139] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 321.913810] ? security_inode_mkdir+0xca/0x100 [ 321.918387] vfs_mkdir+0x463/0x6e0 [ 321.921921] SyS_mkdirat+0x1fd/0x270 [ 321.925626] ? SyS_mknod+0x30/0x30 [ 321.929170] ? fput_many+0xe/0x140 [ 321.932699] ? do_syscall_64+0x4c/0x640 [ 321.936660] ? SyS_mknod+0x30/0x30 [ 321.940204] do_syscall_64+0x1d5/0x640 [ 321.944080] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 321.949270] RIP: 0033:0x7f8777d7a217 [ 321.952965] RSP: 002b:00007f87766eff88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 321.960655] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7a217 23:44:49 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000000)="cc255e618f81cd370a7189f9de307c605bbc00153c7b364eace65e068325104f83734a2ee776719091658be5537e1ac4c9e13c4b823c7ba2cae6b54da2eb4aa0f000845157aa79b741b852e04fe62a9679c7f05bd5d57454dc66825344b7b51b85863369d28d5c9a7180336147a37e5b466141d42a0381616141cd0cb98506a751ed368f9b9881fb669ecccd", 0x8c, 0x24008045, 0x0, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) sendto$phonet(0xffffffffffffffff, &(0x7f0000000000)="cc255e618f81cd370a7189f9de307c605bbc00153c7b364eace65e068325104f83734a2ee776719091658be5537e1ac4c9e13c4b823c7ba2cae6b54da2eb4aa0f000845157aa79b741b852e04fe62a9679c7f05bd5d57454dc66825344b7b51b85863369d28d5c9a7180336147a37e5b466141d42a0381616141cd0cb98506a751ed368f9b9881fb669ecccd", 0x8c, 0x24008045, 0x0, 0x0) (async) 23:44:49 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) [ 321.967916] RDX: 00000000000001ff RSI: 0000000020000440 RDI: 00000000ffffff9c [ 321.975171] RBP: 00007f87766f01d0 R08: 0000000000000000 R09: 00007f87766f01d0 [ 321.982431] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000400 [ 321.989703] R13: 0000000020000440 R14: 00007f87766effe0 R15: 0000000020000580 [ 322.008760] CPU: 0 PID: 13131 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 322.016691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.026046] Call Trace: [ 322.028636] dump_stack+0x1b2/0x281 [ 322.032272] should_fail.cold+0x10a/0x149 [ 322.036426] should_failslab+0xd6/0x130 [ 322.040421] kmem_cache_alloc_trace+0x29a/0x3d0 [ 322.045102] ? copy_mnt_ns+0xa30/0xa30 [ 322.049008] copy_mount_options+0x59/0x2f0 [ 322.053250] ? copy_mnt_ns+0xa30/0xa30 [ 322.057492] SyS_mount+0x84/0x120 [ 322.060948] ? copy_mnt_ns+0xa30/0xa30 [ 322.064840] do_syscall_64+0x1d5/0x640 [ 322.068733] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 322.073922] RIP: 0033:0x7fdc4206263a [ 322.077627] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 322.085339] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc4206263a [ 322.092615] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007fdc409d5fe0 [ 322.099887] RBP: 00007fdc409d6020 R08: 00007fdc409d6020 R09: 0000000020000400 [ 322.107157] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 [ 322.114428] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 23:44:50 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 43) 23:44:50 executing program 0: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r1, &(0x7f0000000100)=""/160, 0xa0) 23:44:50 executing program 4: read$dsp(0xffffffffffffffff, 0x0, 0x0) 23:44:50 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r1) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r2) keyctl$search(0xa, r1, &(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, r2) keyctl$clear(0x7, r0) 23:44:50 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 46) 23:44:50 executing program 0: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) [ 322.262830] FAULT_INJECTION: forcing a failure. [ 322.262830] name failslab, interval 1, probability 0, space 0, times 0 [ 322.274170] CPU: 0 PID: 13179 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 322.282057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.291428] Call Trace: [ 322.294021] dump_stack+0x1b2/0x281 [ 322.295964] FAULT_INJECTION: forcing a failure. [ 322.295964] name failslab, interval 1, probability 0, space 0, times 0 [ 322.297651] should_fail.cold+0x10a/0x149 [ 322.297667] should_failslab+0xd6/0x130 [ 322.297680] kmem_cache_alloc+0x40/0x3c0 [ 322.297696] __es_insert_extent+0x338/0x1360 [ 322.325426] ? __es_shrink+0x8c0/0x8c0 [ 322.329311] ? lock_acquire+0x170/0x3f0 [ 322.333281] ? ext4_es_insert_extent+0x11f/0x530 [ 322.338043] ext4_es_insert_extent+0x1b9/0x530 [ 322.342636] ? ext4_es_find_delayed_extent_range+0x930/0x930 [ 322.348426] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 322.353900] ? ext4_es_find_delayed_extent_range+0x646/0x930 [ 322.359710] ext4_ext_map_blocks+0x1e2c/0x6b10 [ 322.364289] ? __lock_acquire+0x5fc/0x3f20 [ 322.368550] ? __lock_acquire+0x5fc/0x3f20 [ 322.372784] ? mark_buffer_dirty+0x95/0x480 [ 322.377106] ? trace_hardirqs_on+0x10/0x10 [ 322.381338] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 322.386696] ? ext4_find_delalloc_cluster+0x180/0x180 [ 322.391903] ? trace_hardirqs_on+0x10/0x10 [ 322.396124] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 322.400970] ? ext4_es_lookup_extent+0x321/0xac0 [ 322.405727] ? lock_acquire+0x170/0x3f0 [ 322.409700] ? lock_acquire+0x170/0x3f0 [ 322.413679] ? ext4_map_blocks+0x29f/0x1730 [ 322.418000] ext4_map_blocks+0xb19/0x1730 [ 322.422153] ? ext4_issue_zeroout+0x150/0x150 [ 322.426649] ? __ext4_new_inode+0x27c/0x4eb0 [ 322.431060] ext4_getblk+0x98/0x3f0 [ 322.434680] ? ext4_iomap_begin+0x7f0/0x7f0 [ 322.438998] ext4_bread+0x6c/0x1a0 [ 322.442530] ? ext4_getblk+0x3f0/0x3f0 [ 322.446410] ? dquot_initialize_needed+0x240/0x240 [ 322.451346] ext4_append+0x143/0x350 [ 322.455051] ext4_mkdir+0x4c9/0xbd0 [ 322.458817] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 322.463491] ? security_inode_mkdir+0xca/0x100 [ 322.468081] vfs_mkdir+0x463/0x6e0 [ 322.471617] SyS_mkdirat+0x1fd/0x270 [ 322.475330] ? SyS_mknod+0x30/0x30 [ 322.478866] ? fput_many+0xe/0x140 [ 322.482404] ? do_syscall_64+0x4c/0x640 [ 322.486366] ? SyS_mknod+0x30/0x30 [ 322.489907] do_syscall_64+0x1d5/0x640 [ 322.493794] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 322.498977] RIP: 0033:0x7f8777d7a217 [ 322.502675] RSP: 002b:00007f87766eff88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 23:44:50 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r1) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r2) keyctl$search(0xa, r1, &(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, r2) keyctl$clear(0x7, r0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (async) keyctl$clear(0x7, r1) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (async) keyctl$clear(0x7, r2) (async) keyctl$search(0xa, r1, &(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, r2) (async) keyctl$clear(0x7, r0) (async) 23:44:50 executing program 0: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) 23:44:50 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) 23:44:50 executing program 0: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) 23:44:50 executing program 0: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) [ 322.510373] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7a217 [ 322.517724] RDX: 00000000000001ff RSI: 0000000020000440 RDI: 00000000ffffff9c [ 322.524985] RBP: 00007f87766f01d0 R08: 0000000000000000 R09: 00007f87766f01d0 [ 322.532260] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000400 [ 322.539523] R13: 0000000020000440 R14: 00007f87766effe0 R15: 0000000020000580 [ 322.546789] CPU: 1 PID: 13185 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 322.554682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.564033] Call Trace: [ 322.566622] dump_stack+0x1b2/0x281 [ 322.570254] should_fail.cold+0x10a/0x149 [ 322.574410] should_failslab+0xd6/0x130 [ 322.578394] kmem_cache_alloc_trace+0x29a/0x3d0 [ 322.583070] ? copy_mnt_ns+0xa30/0xa30 [ 322.586964] copy_mount_options+0x59/0x2f0 [ 322.591206] ? copy_mnt_ns+0xa30/0xa30 [ 322.595094] SyS_mount+0x84/0x120 [ 322.598557] ? copy_mnt_ns+0xa30/0xa30 [ 322.602449] do_syscall_64+0x1d5/0x640 [ 322.606374] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 322.611559] RIP: 0033:0x7fdc4206263a [ 322.615266] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 322.622973] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc4206263a [ 322.630247] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007fdc409d5fe0 [ 322.632631] vxfs: WRONG superblock magic 00000000 at 1 [ 322.637514] RBP: 00007fdc409d6020 R08: 00007fdc409d6020 R09: 0000000020000400 [ 322.637520] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 23:44:50 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) 23:44:50 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 44) 23:44:50 executing program 0: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) 23:44:50 executing program 4: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) 23:44:50 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (async, rerun: 32) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (rerun: 32) keyctl$clear(0x7, r1) (async) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r2) keyctl$search(0xa, r1, &(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, r2) (async) keyctl$clear(0x7, r0) [ 322.637525] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 [ 322.667019] vxfs: WRONG superblock magic 00000000 at 8 [ 322.687620] vxfs: can't find superblock. 23:44:50 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 47) 23:44:50 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) 23:44:50 executing program 4: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) 23:44:50 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) [ 322.838852] FAULT_INJECTION: forcing a failure. [ 322.838852] name failslab, interval 1, probability 0, space 0, times 0 [ 322.850216] CPU: 0 PID: 13223 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 322.858098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.867449] Call Trace: [ 322.870038] dump_stack+0x1b2/0x281 [ 322.873674] should_fail.cold+0x10a/0x149 [ 322.877826] should_failslab+0xd6/0x130 [ 322.881802] kmem_cache_alloc+0x40/0x3c0 [ 322.885866] __es_insert_extent+0x338/0x1360 [ 322.890287] ext4_es_insert_extent+0x1b9/0x530 [ 322.894871] ? ext4_es_find_delayed_extent_range+0x930/0x930 [ 322.900681] ext4_map_blocks+0x887/0x1730 [ 322.904848] ? ext4_issue_zeroout+0x150/0x150 [ 322.909347] ? __ext4_new_inode+0x27c/0x4eb0 [ 322.913813] ext4_getblk+0x98/0x3f0 [ 322.917494] ? ext4_iomap_begin+0x7f0/0x7f0 [ 322.921829] ext4_bread+0x6c/0x1a0 [ 322.925381] ? ext4_getblk+0x3f0/0x3f0 [ 322.929263] ? dquot_initialize_needed+0x240/0x240 [ 322.934198] ext4_append+0x143/0x350 [ 322.937919] ext4_mkdir+0x4c9/0xbd0 [ 322.941553] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 322.946226] ? security_inode_mkdir+0xca/0x100 [ 322.950808] vfs_mkdir+0x463/0x6e0 [ 322.954359] SyS_mkdirat+0x1fd/0x270 [ 322.958071] ? SyS_mknod+0x30/0x30 [ 322.961603] ? fput_many+0xe/0x140 [ 322.965138] ? do_syscall_64+0x4c/0x640 [ 322.969108] ? SyS_mknod+0x30/0x30 [ 322.972648] do_syscall_64+0x1d5/0x640 [ 322.976540] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 322.981723] RIP: 0033:0x7f8777d7a217 23:44:50 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) 23:44:50 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, 0xfffffffffffffffd, 0x17f402, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x8000) read$dsp(r1, &(0x7f0000000040)=""/80, 0x50) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 23:44:50 executing program 4: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) [ 322.985446] RSP: 002b:00007f87766eff88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 322.993149] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7a217 [ 323.000417] RDX: 00000000000001ff RSI: 0000000020000440 RDI: 00000000ffffff9c [ 323.007689] RBP: 00007f87766f01d0 R08: 0000000000000000 R09: 00007f87766f01d0 [ 323.014957] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000400 [ 323.022309] R13: 0000000020000440 R14: 00007f87766effe0 R15: 0000000020000580 [ 323.037343] FAULT_INJECTION: forcing a failure. [ 323.037343] name failslab, interval 1, probability 0, space 0, times 0 [ 323.075075] CPU: 0 PID: 13225 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 323.082991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.092691] Call Trace: [ 323.095277] dump_stack+0x1b2/0x281 [ 323.098907] should_fail.cold+0x10a/0x149 [ 323.103061] should_failslab+0xd6/0x130 [ 323.107041] __kmalloc_track_caller+0x2bc/0x400 [ 323.111717] ? strndup_user+0x5b/0xf0 [ 323.115526] memdup_user+0x22/0xa0 [ 323.119068] strndup_user+0x5b/0xf0 [ 323.122696] ? copy_mnt_ns+0xa30/0xa30 [ 323.126589] SyS_mount+0x68/0x120 [ 323.130046] ? copy_mnt_ns+0xa30/0xa30 [ 323.133937] do_syscall_64+0x1d5/0x640 [ 323.137840] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 323.143027] RIP: 0033:0x7fdc4206263a [ 323.146729] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 323.154436] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc4206263a [ 323.161709] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007fdc409d5fe0 [ 323.169076] RBP: 00007fdc409d6020 R08: 00007fdc409d6020 R09: 0000000020000400 [ 323.176344] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 23:44:50 executing program 4: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) [ 323.183610] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 [ 323.193816] vxfs: WRONG superblock magic 00000000 at 1 [ 323.199470] vxfs: WRONG superblock magic 00000000 at 8 [ 323.204883] vxfs: can't find superblock. 23:44:51 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 45) 23:44:51 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, 0xfffffffffffffffd, 0x17f402, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x8000) read$dsp(r1, &(0x7f0000000040)=""/80, 0x50) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) openat$dsp(0xffffffffffffff9c, 0xfffffffffffffffd, 0x17f402, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x8000) (async) read$dsp(r1, &(0x7f0000000040)=""/80, 0x50) (async) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) (async) 23:44:51 executing program 4: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) 23:44:51 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) 23:44:51 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 48) 23:44:51 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) [ 323.327117] FAULT_INJECTION: forcing a failure. [ 323.327117] name failslab, interval 1, probability 0, space 0, times 0 [ 323.343843] CPU: 1 PID: 13274 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 323.348756] FAULT_INJECTION: forcing a failure. [ 323.348756] name failslab, interval 1, probability 0, space 0, times 0 [ 323.352314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.352319] Call Trace: [ 323.352337] dump_stack+0x1b2/0x281 [ 323.352362] should_fail.cold+0x10a/0x149 [ 323.383203] should_failslab+0xd6/0x130 [ 323.387188] __kmalloc_track_caller+0x2bc/0x400 [ 323.391857] ? strndup_user+0x5b/0xf0 [ 323.395665] memdup_user+0x22/0xa0 [ 323.399206] strndup_user+0x5b/0xf0 [ 323.402834] ? copy_mnt_ns+0xa30/0xa30 [ 323.406735] SyS_mount+0x68/0x120 [ 323.410188] ? copy_mnt_ns+0xa30/0xa30 [ 323.414076] do_syscall_64+0x1d5/0x640 [ 323.417965] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 323.423149] RIP: 0033:0x7f8777d7c63a [ 323.426859] RSP: 002b:00007f87766eff88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 323.434566] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7c63a [ 323.441827] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007f87766effe0 [ 323.449086] RBP: 00007f87766f0020 R08: 00007f87766f0020 R09: 0000000020000400 [ 323.456361] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 [ 323.463613] R13: 0000000020000440 R14: 00007f87766effe0 R15: 0000000020000580 23:44:51 executing program 4: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) [ 323.470882] CPU: 0 PID: 13272 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 323.478768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.488118] Call Trace: [ 323.490698] dump_stack+0x1b2/0x281 [ 323.494324] should_fail.cold+0x10a/0x149 [ 323.498475] should_failslab+0xd6/0x130 [ 323.502451] __kmalloc_track_caller+0x2bc/0x400 [ 323.507156] ? kstrdup_const+0x35/0x60 [ 323.511042] ? lock_downgrade+0x740/0x740 [ 323.515192] kstrdup+0x36/0x70 [ 323.518388] kstrdup_const+0x35/0x60 [ 323.522108] alloc_vfsmnt+0xe0/0x7f0 [ 323.525819] ? _raw_read_unlock+0x29/0x40 [ 323.529980] vfs_kern_mount.part.0+0x27/0x470 [ 323.534482] do_mount+0xe65/0x2a30 [ 323.538026] ? __do_page_fault+0x159/0xad0 [ 323.542266] ? retint_kernel+0x2d/0x2d [ 323.546156] ? copy_mount_string+0x40/0x40 [ 323.550392] ? memset+0x20/0x40 [ 323.553674] ? copy_mount_options+0x1fa/0x2f0 [ 323.558167] ? copy_mnt_ns+0xa30/0xa30 [ 323.562055] SyS_mount+0xa8/0x120 [ 323.565544] ? copy_mnt_ns+0xa30/0xa30 [ 323.569433] do_syscall_64+0x1d5/0x640 23:44:51 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) 23:44:51 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f00000000c0)) 23:44:51 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) 23:44:51 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, 0xfffffffffffffffd, 0x17f402, 0x0) (async, rerun: 32) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x8000) (rerun: 32) read$dsp(r1, &(0x7f0000000040)=""/80, 0x50) (async) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) [ 323.573313] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 323.578481] RIP: 0033:0x7fdc4206263a [ 323.582173] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 323.589862] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc4206263a [ 323.597125] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007fdc409d5fe0 [ 323.604390] RBP: 00007fdc409d6020 R08: 00007fdc409d6020 R09: 0000000020000400 [ 323.611642] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 [ 323.618898] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 23:44:51 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 49) 23:44:51 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 46) 23:44:51 executing program 4: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) 23:44:51 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f00000000c0)) 23:44:51 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x7) [ 323.766687] FAULT_INJECTION: forcing a failure. [ 323.766687] name failslab, interval 1, probability 0, space 0, times 0 [ 323.798816] FAULT_INJECTION: forcing a failure. [ 323.798816] name failslab, interval 1, probability 0, space 0, times 0 23:44:51 executing program 4: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) [ 323.818164] CPU: 0 PID: 13311 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 323.826079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.835433] Call Trace: [ 323.838023] dump_stack+0x1b2/0x281 [ 323.841657] should_fail.cold+0x10a/0x149 [ 323.845892] should_failslab+0xd6/0x130 [ 323.849870] kmem_cache_alloc_trace+0x29a/0x3d0 [ 323.854537] ? copy_mnt_ns+0xa30/0xa30 [ 323.858424] copy_mount_options+0x59/0x2f0 [ 323.862659] ? copy_mnt_ns+0xa30/0xa30 23:44:51 executing program 4: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) [ 323.866559] SyS_mount+0x84/0x120 [ 323.870009] ? copy_mnt_ns+0xa30/0xa30 [ 323.873899] do_syscall_64+0x1d5/0x640 [ 323.877798] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 323.884201] RIP: 0033:0x7f8777d7c63a [ 323.887909] RSP: 002b:00007f87766eff88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 323.895614] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7c63a [ 323.902884] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007f87766effe0 [ 323.910149] RBP: 00007f87766f0020 R08: 00007f87766f0020 R09: 0000000020000400 [ 323.917417] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 [ 323.924685] R13: 0000000020000440 R14: 00007f87766effe0 R15: 0000000020000580 [ 323.935625] CPU: 0 PID: 13321 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 323.943524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.952874] Call Trace: [ 323.955461] dump_stack+0x1b2/0x281 [ 323.959093] should_fail.cold+0x10a/0x149 [ 323.963242] should_failslab+0xd6/0x130 23:44:51 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) [ 323.967222] __kmalloc_track_caller+0x2bc/0x400 [ 323.971975] ? kstrdup_const+0x35/0x60 [ 323.975861] ? lock_downgrade+0x740/0x740 [ 323.980013] kstrdup+0x36/0x70 [ 323.983208] kstrdup_const+0x35/0x60 [ 323.986916] alloc_vfsmnt+0xe0/0x7f0 [ 323.990631] ? _raw_read_unlock+0x29/0x40 [ 323.994781] vfs_kern_mount.part.0+0x27/0x470 [ 323.999285] do_mount+0xe65/0x2a30 [ 324.002828] ? __do_page_fault+0x159/0xad0 [ 324.007070] ? retint_kernel+0x2d/0x2d [ 324.010960] ? copy_mount_string+0x40/0x40 [ 324.015184] ? memset+0x20/0x40 [ 324.018443] ? copy_mount_options+0x1fa/0x2f0 [ 324.022919] ? copy_mnt_ns+0xa30/0xa30 [ 324.026788] SyS_mount+0xa8/0x120 [ 324.030218] ? copy_mnt_ns+0xa30/0xa30 [ 324.034149] do_syscall_64+0x1d5/0x640 [ 324.038031] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 324.043212] RIP: 0033:0x7fdc4206263a [ 324.046911] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 324.054725] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc4206263a [ 324.062072] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007fdc409d5fe0 [ 324.069335] RBP: 00007fdc409d6020 R08: 00007fdc409d6020 R09: 0000000020000400 [ 324.076679] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 [ 324.083950] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 23:44:52 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) 23:44:52 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x7) 23:44:52 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 50) 23:44:52 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 47) 23:44:52 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f00000000c0)) [ 324.350243] FAULT_INJECTION: forcing a failure. [ 324.350243] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 324.362077] CPU: 1 PID: 13357 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 324.369957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.379310] Call Trace: [ 324.381900] dump_stack+0x1b2/0x281 [ 324.385539] should_fail.cold+0x10a/0x149 [ 324.389698] __alloc_pages_nodemask+0x22c/0x2720 [ 324.394465] ? __lock_acquire+0x5fc/0x3f20 [ 324.398714] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 324.403566] ? trace_hardirqs_on+0x10/0x10 [ 324.407814] ? trace_hardirqs_on+0x10/0x10 [ 324.409233] FAULT_INJECTION: forcing a failure. [ 324.409233] name failslab, interval 1, probability 0, space 0, times 0 [ 324.412152] ? reacquire_held_locks+0xb5/0x3f0 [ 324.412162] ? dput.part.0+0x3b4/0x710 [ 324.412178] ? list_lru_add+0x22a/0x490 [ 324.435770] cache_grow_begin+0x91/0x700 [ 324.439816] ? fs_reclaim_release+0xd0/0x110 [ 324.444225] ? check_preemption_disabled+0x35/0x240 [ 324.449224] cache_alloc_refill+0x273/0x350 [ 324.453531] kmem_cache_alloc_trace+0x340/0x3d0 [ 324.458182] ? copy_mnt_ns+0xa30/0xa30 [ 324.462068] copy_mount_options+0x59/0x2f0 [ 324.466287] ? copy_mnt_ns+0xa30/0xa30 [ 324.470155] SyS_mount+0x84/0x120 [ 324.473591] ? copy_mnt_ns+0xa30/0xa30 [ 324.477463] do_syscall_64+0x1d5/0x640 [ 324.481347] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 324.486517] RIP: 0033:0x7fdc4206263a [ 324.490217] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 324.497906] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc4206263a [ 324.506115] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007fdc409d5fe0 [ 324.513389] RBP: 00007fdc409d6020 R08: 00007fdc409d6020 R09: 0000000020000400 [ 324.520637] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 [ 324.527896] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 [ 324.535246] CPU: 0 PID: 13362 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 324.543131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.552484] Call Trace: [ 324.555077] dump_stack+0x1b2/0x281 [ 324.558712] should_fail.cold+0x10a/0x149 [ 324.562865] should_failslab+0xd6/0x130 [ 324.566841] kmem_cache_alloc+0x28e/0x3c0 [ 324.570993] getname_flags+0xc8/0x550 [ 324.572692] vxfs: WRONG superblock magic 00000000 at 1 [ 324.574791] ? __do_page_fault+0x159/0xad0 [ 324.574807] user_path_at_empty+0x2a/0x50 [ 324.574819] do_mount+0x118/0x2a30 [ 324.574829] ? __do_page_fault+0x159/0xad0 [ 324.574838] ? retint_kernel+0x2d/0x2d [ 324.574848] ? copy_mount_string+0x40/0x40 [ 324.574859] ? memset+0x20/0x40 [ 324.574868] ? copy_mount_options+0x1fa/0x2f0 [ 324.574876] ? copy_mnt_ns+0xa30/0xa30 [ 324.574886] SyS_mount+0xa8/0x120 [ 324.574895] ? copy_mnt_ns+0xa30/0xa30 [ 324.574905] do_syscall_64+0x1d5/0x640 [ 324.574917] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 324.584009] vxfs: WRONG superblock magic 00000000 at 8 [ 324.584394] RIP: 0033:0x7f8777d7c63a [ 324.594032] vxfs: can't find superblock. 23:44:52 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) 23:44:52 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x7) 23:44:52 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 48) [ 324.596249] RSP: 002b:00007f87766eff88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 324.596259] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7c63a [ 324.596264] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007f87766effe0 [ 324.596268] RBP: 00007f87766f0020 R08: 00007f87766f0020 R09: 0000000020000400 [ 324.596273] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 [ 324.596278] R13: 0000000020000440 R14: 00007f87766effe0 R15: 0000000020000580 23:44:52 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 23:44:52 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 51) 23:44:52 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) [ 324.794275] FAULT_INJECTION: forcing a failure. [ 324.794275] name failslab, interval 1, probability 0, space 0, times 0 [ 324.814170] CPU: 1 PID: 13390 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 324.822090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.831445] Call Trace: [ 324.834032] dump_stack+0x1b2/0x281 [ 324.837664] should_fail.cold+0x10a/0x149 [ 324.841816] should_failslab+0xd6/0x130 [ 324.845792] kmem_cache_alloc_trace+0x29a/0x3d0 [ 324.850481] ? copy_mnt_ns+0xa30/0xa30 [ 324.854457] copy_mount_options+0x59/0x2f0 [ 324.858696] ? copy_mnt_ns+0xa30/0xa30 [ 324.859369] FAULT_INJECTION: forcing a failure. [ 324.859369] name failslab, interval 1, probability 0, space 0, times 0 [ 324.863106] SyS_mount+0x84/0x120 [ 324.863117] ? copy_mnt_ns+0xa30/0xa30 [ 324.863128] do_syscall_64+0x1d5/0x640 [ 324.863145] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 324.890867] RIP: 0033:0x7f8777d7c63a [ 324.894579] RSP: 002b:00007f87766eff88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 324.902368] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7c63a [ 324.909634] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007f87766effe0 [ 324.916889] RBP: 00007f87766f0020 R08: 00007f87766f0020 R09: 0000000020000400 [ 324.924249] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 [ 324.931504] R13: 0000000020000440 R14: 00007f87766effe0 R15: 0000000020000580 [ 324.938771] CPU: 0 PID: 13395 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 324.946658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.956008] Call Trace: [ 324.958594] dump_stack+0x1b2/0x281 [ 324.962225] should_fail.cold+0x10a/0x149 [ 324.966385] should_failslab+0xd6/0x130 [ 324.970361] kmem_cache_alloc+0x28e/0x3c0 [ 324.974513] alloc_vfsmnt+0x23/0x7f0 [ 324.978235] ? _raw_read_unlock+0x29/0x40 [ 324.982389] vfs_kern_mount.part.0+0x27/0x470 [ 324.986885] do_mount+0xe65/0x2a30 [ 324.990461] ? __do_page_fault+0x159/0xad0 [ 324.994783] ? retint_kernel+0x2d/0x2d [ 324.998755] ? copy_mount_string+0x40/0x40 [ 325.002994] ? memset+0x20/0x40 [ 325.006307] ? copy_mount_options+0x1fa/0x2f0 [ 325.010984] ? copy_mnt_ns+0xa30/0xa30 [ 325.014869] SyS_mount+0xa8/0x120 [ 325.018355] ? copy_mnt_ns+0xa30/0xa30 [ 325.022243] do_syscall_64+0x1d5/0x640 [ 325.026143] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 325.031326] RIP: 0033:0x7fdc4206263a [ 325.035029] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 23:44:52 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) 23:44:52 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f00000000c0)) 23:44:52 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) (async) 23:44:52 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000000)) 23:44:52 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 49) [ 325.042734] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc4206263a [ 325.050003] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007fdc409d5fe0 [ 325.057279] RBP: 00007fdc409d6020 R08: 00007fdc409d6020 R09: 0000000020000400 [ 325.064546] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 [ 325.071816] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 23:44:52 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000000)) [ 325.169994] FAULT_INJECTION: forcing a failure. [ 325.169994] name failslab, interval 1, probability 0, space 0, times 0 [ 325.186524] CPU: 0 PID: 13423 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 325.194426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.203776] Call Trace: [ 325.206372] dump_stack+0x1b2/0x281 [ 325.210037] should_fail.cold+0x10a/0x149 [ 325.214226] should_failslab+0xd6/0x130 [ 325.218206] kmem_cache_alloc+0x28e/0x3c0 [ 325.222367] alloc_vfsmnt+0x23/0x7f0 [ 325.226079] ? _raw_read_unlock+0x29/0x40 [ 325.230227] vfs_kern_mount.part.0+0x27/0x470 [ 325.234723] do_mount+0xe65/0x2a30 [ 325.238269] ? __do_page_fault+0x159/0xad0 [ 325.242501] ? retint_kernel+0x2d/0x2d [ 325.246388] ? copy_mount_string+0x40/0x40 [ 325.250623] ? memset+0x20/0x40 [ 325.253907] ? copy_mount_options+0x1fa/0x2f0 [ 325.258399] ? copy_mnt_ns+0xa30/0xa30 [ 325.262370] SyS_mount+0xa8/0x120 [ 325.265817] ? copy_mnt_ns+0xa30/0xa30 [ 325.269702] do_syscall_64+0x1d5/0x640 [ 325.273590] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 325.278772] RIP: 0033:0x7f8777d7c63a [ 325.282478] RSP: 002b:00007f87766eff88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 325.290181] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7c63a [ 325.297449] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007f87766effe0 [ 325.304785] RBP: 00007f87766f0020 R08: 00007f87766f0020 R09: 0000000020000400 [ 325.312052] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 23:44:53 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) 23:44:53 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) 23:44:53 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000000)) 23:44:53 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000040)) 23:44:53 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 52) [ 325.319477] R13: 0000000020000440 R14: 00007f87766effe0 R15: 0000000020000580 23:44:53 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 50) 23:44:53 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) [ 325.453905] FAULT_INJECTION: forcing a failure. [ 325.453905] name failslab, interval 1, probability 0, space 0, times 0 [ 325.475806] FAULT_INJECTION: forcing a failure. [ 325.475806] name failslab, interval 1, probability 0, space 0, times 0 [ 325.491125] CPU: 0 PID: 13452 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 325.499027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.508381] Call Trace: [ 325.510973] dump_stack+0x1b2/0x281 [ 325.514604] should_fail.cold+0x10a/0x149 [ 325.518759] should_failslab+0xd6/0x130 [ 325.522741] __kmalloc_track_caller+0x2bc/0x400 [ 325.527416] ? kstrdup_const+0x35/0x60 [ 325.531303] ? lock_downgrade+0x740/0x740 [ 325.535454] kstrdup+0x36/0x70 [ 325.538647] kstrdup_const+0x35/0x60 [ 325.542359] alloc_vfsmnt+0xe0/0x7f0 [ 325.546107] ? _raw_read_unlock+0x29/0x40 [ 325.550341] vfs_kern_mount.part.0+0x27/0x470 [ 325.554840] do_mount+0xe65/0x2a30 [ 325.558384] ? __do_page_fault+0x159/0xad0 [ 325.562635] ? retint_kernel+0x2d/0x2d [ 325.566604] ? copy_mount_string+0x40/0x40 [ 325.570837] ? memset+0x20/0x40 [ 325.574118] ? copy_mount_options+0x1fa/0x2f0 [ 325.578611] ? copy_mnt_ns+0xa30/0xa30 [ 325.582497] SyS_mount+0xa8/0x120 [ 325.585937] ? copy_mnt_ns+0xa30/0xa30 [ 325.589814] do_syscall_64+0x1d5/0x640 [ 325.593723] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 325.598902] RIP: 0033:0x7f8777d7c63a [ 325.602601] RSP: 002b:00007f87766eff88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 325.610299] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7c63a [ 325.617553] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007f87766effe0 [ 325.624805] RBP: 00007f87766f0020 R08: 00007f87766f0020 R09: 0000000020000400 [ 325.632055] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 [ 325.639308] R13: 0000000020000440 R14: 00007f87766effe0 R15: 0000000020000580 [ 325.646597] CPU: 1 PID: 13455 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 325.655004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.664356] Call Trace: [ 325.666974] dump_stack+0x1b2/0x281 [ 325.670606] should_fail.cold+0x10a/0x149 [ 325.674757] should_failslab+0xd6/0x130 [ 325.678730] kmem_cache_alloc+0x28e/0x3c0 [ 325.682876] getname_kernel+0x4e/0x340 [ 325.686789] kern_path+0x1b/0x40 [ 325.690155] lookup_bdev+0xc6/0x1c0 [ 325.693791] ? bd_acquire+0x440/0x440 [ 325.697598] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 325.703049] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 325.708150] blkdev_get_by_path+0x1b/0xa0 [ 325.712296] mount_bdev+0x4c/0x360 [ 325.715830] ? vxfs_try_sb_magic+0x3b0/0x3b0 [ 325.720237] mount_fs+0x92/0x2a0 [ 325.723602] vfs_kern_mount.part.0+0x5b/0x470 [ 325.728095] do_mount+0xe65/0x2a30 [ 325.731631] ? __do_page_fault+0x159/0xad0 [ 325.735859] ? retint_kernel+0x2d/0x2d [ 325.739746] ? copy_mount_string+0x40/0x40 [ 325.743983] ? memset+0x20/0x40 [ 325.747266] ? copy_mount_options+0x1fa/0x2f0 23:44:53 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) 23:44:53 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000040)) 23:44:53 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r0, 0x0, 0x0) 23:44:53 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async, rerun: 64) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) (rerun: 64) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000040)) 23:44:53 executing program 5: r0 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/dsp\x00', 0xffffffffffffffff) r1 = request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='/dev/dsp\x00', r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0x80000000000000, 0x90080) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r2) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r3) keyctl$unlink(0x9, r2, r3) [ 325.751757] ? copy_mnt_ns+0xa30/0xa30 [ 325.755640] SyS_mount+0xa8/0x120 [ 325.759348] ? copy_mnt_ns+0xa30/0xa30 [ 325.763241] do_syscall_64+0x1d5/0x640 [ 325.767133] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 325.772321] RIP: 0033:0x7fdc4206263a [ 325.776026] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 325.783731] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc4206263a [ 325.790997] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007fdc409d5fe0 [ 325.798266] RBP: 00007fdc409d6020 R08: 00007fdc409d6020 R09: 0000000020000400 [ 325.805544] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 [ 325.812809] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 23:44:53 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) 23:44:53 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r0, 0x0, 0x0) 23:44:53 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 51) 23:44:53 executing program 5: r0 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/dsp\x00', 0xffffffffffffffff) r1 = request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='/dev/dsp\x00', r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000040), 0x80000000000000, 0x90080) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r1) (async) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r2) (async) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r3) (async) keyctl$unlink(0x9, r2, r3) 23:44:53 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 53) 23:44:53 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r0, 0x0, 0x0) 23:44:53 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) [ 326.046151] FAULT_INJECTION: forcing a failure. [ 326.046151] name failslab, interval 1, probability 0, space 0, times 0 [ 326.065360] FAULT_INJECTION: forcing a failure. [ 326.065360] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 326.090087] CPU: 0 PID: 13506 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 326.098004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.107361] Call Trace: [ 326.109960] dump_stack+0x1b2/0x281 [ 326.113595] should_fail.cold+0x10a/0x149 [ 326.117751] should_failslab+0xd6/0x130 [ 326.121731] kmem_cache_alloc+0x28e/0x3c0 [ 326.125883] getname_kernel+0x4e/0x340 [ 326.129775] kern_path+0x1b/0x40 [ 326.133161] lookup_bdev+0xc6/0x1c0 [ 326.136798] ? bd_acquire+0x440/0x440 [ 326.140601] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 326.146067] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 326.151088] blkdev_get_by_path+0x1b/0xa0 [ 326.155238] mount_bdev+0x4c/0x360 [ 326.158778] ? vxfs_try_sb_magic+0x3b0/0x3b0 [ 326.163188] mount_fs+0x92/0x2a0 [ 326.166556] vfs_kern_mount.part.0+0x5b/0x470 [ 326.171054] do_mount+0xe65/0x2a30 [ 326.174596] ? __do_page_fault+0x159/0xad0 [ 326.178846] ? retint_kernel+0x2d/0x2d [ 326.182739] ? copy_mount_string+0x40/0x40 [ 326.186966] ? memset+0x20/0x40 [ 326.190262] ? copy_mount_options+0x1fa/0x2f0 [ 326.194751] ? copy_mnt_ns+0xa30/0xa30 [ 326.198623] SyS_mount+0xa8/0x120 [ 326.202060] ? copy_mnt_ns+0xa30/0xa30 [ 326.205933] do_syscall_64+0x1d5/0x640 [ 326.209806] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 326.214977] RIP: 0033:0x7fdc4206263a [ 326.218679] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 326.226375] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc4206263a [ 326.234084] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007fdc409d5fe0 [ 326.241338] RBP: 00007fdc409d6020 R08: 00007fdc409d6020 R09: 0000000020000400 [ 326.248588] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 [ 326.255841] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 [ 326.263132] CPU: 1 PID: 13505 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 326.271023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.280459] Call Trace: [ 326.283134] dump_stack+0x1b2/0x281 [ 326.286830] should_fail.cold+0x10a/0x149 [ 326.290981] __alloc_pages_nodemask+0x22c/0x2720 [ 326.295742] ? trace_hardirqs_on+0x10/0x10 [ 326.299976] ? pcpu_alloc+0xbe0/0xf50 [ 326.303781] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 326.308648] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 326.314108] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 326.319135] alloc_pages_current+0x155/0x260 [ 326.323716] ? __lockdep_init_map+0x100/0x560 [ 326.328206] get_zeroed_page+0x19/0x50 [ 326.332078] mount_fs+0x1c7/0x2a0 [ 326.335528] vfs_kern_mount.part.0+0x5b/0x470 [ 326.340264] do_mount+0xe65/0x2a30 [ 326.343785] ? __do_page_fault+0x159/0xad0 [ 326.348009] ? retint_kernel+0x2d/0x2d [ 326.351882] ? copy_mount_string+0x40/0x40 [ 326.356123] ? memset+0x20/0x40 [ 326.359380] ? copy_mount_options+0x1fa/0x2f0 [ 326.363852] ? copy_mnt_ns+0xa30/0xa30 [ 326.367734] SyS_mount+0xa8/0x120 [ 326.371200] ? copy_mnt_ns+0xa30/0xa30 [ 326.375077] do_syscall_64+0x1d5/0x640 [ 326.378969] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 326.384147] RIP: 0033:0x7f8777d7c63a [ 326.387839] RSP: 002b:00007f87766eff88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 23:44:54 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) 23:44:54 executing program 5: r0 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/dsp\x00', 0xffffffffffffffff) r1 = request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='/dev/dsp\x00', r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000040), 0x80000000000000, 0x90080) (async) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r1) (async) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r2) (async) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r3) (async) keyctl$unlink(0x9, r2, r3) 23:44:54 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r0, 0x0, 0x0) 23:44:54 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0) 23:44:54 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 54) 23:44:54 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 52) [ 326.395551] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7c63a [ 326.402819] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007f87766effe0 [ 326.410069] RBP: 00007f87766f0020 R08: 00007f87766f0020 R09: 0000000020000400 [ 326.417335] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 [ 326.424586] R13: 0000000020000440 R14: 00007f87766effe0 R15: 0000000020000580 [ 326.556227] FAULT_INJECTION: forcing a failure. [ 326.556227] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 326.568061] CPU: 1 PID: 13541 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 326.575942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.585297] Call Trace: [ 326.587886] dump_stack+0x1b2/0x281 [ 326.591519] should_fail.cold+0x10a/0x149 [ 326.595673] __alloc_pages_nodemask+0x22c/0x2720 [ 326.600427] ? __save_stack_trace+0x63/0x160 [ 326.604839] ? is_bpf_text_address+0x91/0x150 [ 326.609338] ? __lock_acquire+0x5fc/0x3f20 [ 326.613574] ? cmp_ex_sort+0xb0/0xb0 [ 326.617291] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 326.622152] ? search_extable+0x6f/0x80 [ 326.626128] ? trim_init_extable+0x280/0x280 [ 326.630536] ? __kernel_text_address+0x9/0x30 [ 326.633390] FAULT_INJECTION: forcing a failure. [ 326.633390] name failslab, interval 1, probability 0, space 0, times 0 [ 326.635025] ? copy_mount_options+0x194/0x2f0 [ 326.635036] ? fixup_exception+0x93/0xd0 [ 326.635047] ? no_context+0x9c/0x7c0 [ 326.635059] ? force_sig_info_fault.constprop.0+0x260/0x260 [ 326.635066] ? bad_area_access_error+0x1f8/0x3e0 [ 326.635080] cache_grow_begin+0x91/0x700 [ 326.635089] ? fs_reclaim_release+0xd0/0x110 [ 326.635100] ? check_preemption_disabled+0x35/0x240 [ 326.635111] cache_alloc_refill+0x273/0x350 [ 326.635129] kmem_cache_alloc+0x333/0x3c0 [ 326.691002] getname_flags+0xc8/0x550 [ 326.694805] ? __do_page_fault+0x159/0xad0 [ 326.699144] user_path_at_empty+0x2a/0x50 [ 326.703299] do_mount+0x118/0x2a30 [ 326.706829] ? __do_page_fault+0x159/0xad0 [ 326.711061] ? retint_kernel+0x2d/0x2d [ 326.714953] ? copy_mount_string+0x40/0x40 [ 326.719172] ? memset+0x20/0x40 [ 326.722435] ? copy_mount_options+0x1fa/0x2f0 [ 326.726917] ? copy_mnt_ns+0xa30/0xa30 [ 326.730881] SyS_mount+0xa8/0x120 [ 326.734325] ? copy_mnt_ns+0xa30/0xa30 [ 326.738284] do_syscall_64+0x1d5/0x640 [ 326.742157] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 326.747332] RIP: 0033:0x7f8777d7c63a [ 326.751043] RSP: 002b:00007f87766eff88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 326.758742] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7c63a [ 326.766086] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007f87766effe0 [ 326.773341] RBP: 00007f87766f0020 R08: 00007f87766f0020 R09: 0000000020000400 [ 326.780596] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 [ 326.787850] R13: 0000000020000440 R14: 00007f87766effe0 R15: 0000000020000580 [ 326.795125] CPU: 0 PID: 13547 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 326.798323] vxfs: WRONG superblock magic 00000000 at 1 [ 326.803024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.803028] Call Trace: [ 326.803045] dump_stack+0x1b2/0x281 [ 326.803060] should_fail.cold+0x10a/0x149 [ 326.803073] should_failslab+0xd6/0x130 [ 326.808727] vxfs: WRONG superblock magic 00000000 at 8 [ 326.817677] kmem_cache_alloc+0x28e/0x3c0 [ 326.817691] getname_kernel+0x4e/0x340 [ 326.817702] kern_path+0x1b/0x40 [ 326.817713] lookup_bdev+0xc6/0x1c0 [ 326.817721] ? bd_acquire+0x440/0x440 [ 326.817730] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 326.817742] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 326.820403] vxfs: can't find superblock. [ 326.823921] blkdev_get_by_path+0x1b/0xa0 [ 326.823932] mount_bdev+0x4c/0x360 [ 326.823940] ? vxfs_try_sb_magic+0x3b0/0x3b0 [ 326.823950] mount_fs+0x92/0x2a0 [ 326.823964] vfs_kern_mount.part.0+0x5b/0x470 [ 326.891055] do_mount+0xe65/0x2a30 [ 326.894630] ? __do_page_fault+0x159/0xad0 [ 326.898868] ? retint_kernel+0x2d/0x2d [ 326.902758] ? copy_mount_string+0x40/0x40 [ 326.906991] ? memset+0x20/0x40 [ 326.910374] ? copy_mount_options+0x1fa/0x2f0 [ 326.914865] ? copy_mnt_ns+0xa30/0xa30 [ 326.918782] SyS_mount+0xa8/0x120 [ 326.922315] ? copy_mnt_ns+0xa30/0xa30 [ 326.926213] do_syscall_64+0x1d5/0x640 [ 326.930115] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 326.935300] RIP: 0033:0x7fdc4206263a [ 326.939003] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 326.946711] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc4206263a 23:44:54 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r0, 0x0, 0x0) 23:44:54 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r0, 0x0, 0x0) 23:44:54 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r0, 0x0, 0x0) 23:44:54 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r0, 0x0, 0x0) 23:44:54 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$dsp(r0, 0x0, 0x0) 23:44:54 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) [ 326.953984] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007fdc409d5fe0 [ 326.961255] RBP: 00007fdc409d6020 R08: 00007fdc409d6020 R09: 0000000020000400 [ 326.968525] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 [ 326.975795] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 23:44:54 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) 23:44:54 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) 23:44:54 executing program 5: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x2, 0x3}) 23:44:54 executing program 0: openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) 23:44:54 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 53) 23:44:54 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 55) 23:44:55 executing program 0: openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) 23:44:55 executing program 5: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x2, 0x3}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x2, 0x3}) (async) [ 327.201851] FAULT_INJECTION: forcing a failure. [ 327.201851] name failslab, interval 1, probability 0, space 0, times 0 [ 327.220380] FAULT_INJECTION: forcing a failure. [ 327.220380] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 327.232287] CPU: 1 PID: 13591 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 327.240169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.249528] Call Trace: [ 327.252127] dump_stack+0x1b2/0x281 [ 327.255775] should_fail.cold+0x10a/0x149 [ 327.260082] ? get_page_from_freelist+0xaf6/0x25a0 [ 327.265004] __alloc_pages_nodemask+0x22c/0x2720 [ 327.269748] ? lock_downgrade+0x740/0x740 [ 327.273923] ? page_outside_zone_boundaries+0x1db/0x310 [ 327.279269] ? __lock_acquire+0x5fc/0x3f20 [ 327.283498] ? preempt_count_add+0xaf/0x170 [ 327.287804] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 327.292652] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 327.298185] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 327.303191] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 327.308202] cache_grow_begin+0x91/0x700 [ 327.312253] ? fs_reclaim_release+0xd0/0x110 [ 327.316657] ? check_preemption_disabled+0x35/0x240 [ 327.321671] cache_alloc_refill+0x273/0x350 [ 327.325994] kmem_cache_alloc+0x333/0x3c0 [ 327.330141] getname_kernel+0x4e/0x340 [ 327.334030] kern_path+0x1b/0x40 [ 327.337396] lookup_bdev+0xc6/0x1c0 [ 327.341007] ? bd_acquire+0x440/0x440 [ 327.344789] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 327.350222] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 327.355230] blkdev_get_by_path+0x1b/0xa0 [ 327.359370] mount_bdev+0x4c/0x360 [ 327.362892] ? vxfs_try_sb_magic+0x3b0/0x3b0 [ 327.367282] mount_fs+0x92/0x2a0 [ 327.370635] vfs_kern_mount.part.0+0x5b/0x470 [ 327.375134] do_mount+0xe65/0x2a30 [ 327.378675] ? __do_page_fault+0x159/0xad0 [ 327.382992] ? retint_kernel+0x2d/0x2d [ 327.386877] ? copy_mount_string+0x40/0x40 [ 327.391117] ? memset+0x20/0x40 [ 327.394380] ? copy_mount_options+0x1fa/0x2f0 [ 327.398861] ? copy_mnt_ns+0xa30/0xa30 [ 327.402767] SyS_mount+0xa8/0x120 [ 327.406202] ? copy_mnt_ns+0xa30/0xa30 [ 327.410084] do_syscall_64+0x1d5/0x640 [ 327.414059] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 327.419227] RIP: 0033:0x7fdc4206263a [ 327.422916] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 327.430624] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc4206263a [ 327.437890] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007fdc409d5fe0 [ 327.445141] RBP: 00007fdc409d6020 R08: 00007fdc409d6020 R09: 0000000020000400 [ 327.452392] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 [ 327.459739] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 [ 327.467007] CPU: 0 PID: 13589 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 327.474898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.483264] vxfs: WRONG superblock magic 00000000 at 1 [ 327.484243] Call Trace: [ 327.484271] dump_stack+0x1b2/0x281 [ 327.484284] should_fail.cold+0x10a/0x149 [ 327.484297] should_failslab+0xd6/0x130 [ 327.489985] vxfs: WRONG superblock magic 00000000 at 8 [ 327.492312] kmem_cache_alloc_trace+0x29a/0x3d0 [ 327.492325] ? set_bdev_super+0x110/0x110 [ 327.492335] sget_userns+0x102/0xc10 [ 327.501506] vxfs: can't find superblock. [ 327.504031] ? set_bdev_super+0x110/0x110 [ 327.504046] ? ns_test_super+0x50/0x50 [ 327.504057] ? set_bdev_super+0x110/0x110 [ 327.537985] ? ns_test_super+0x50/0x50 [ 327.541868] sget+0xd1/0x110 [ 327.544887] mount_bdev+0xcd/0x360 [ 327.548423] ? vxfs_try_sb_magic+0x3b0/0x3b0 23:44:55 executing program 5: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x2, 0x3}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x2, 0x3}) (async) 23:44:55 executing program 0: openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) 23:44:55 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x48040) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 23:44:55 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x48040) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x48040) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) [ 327.552830] mount_fs+0x92/0x2a0 [ 327.556199] vfs_kern_mount.part.0+0x5b/0x470 [ 327.560690] do_mount+0xe65/0x2a30 [ 327.564228] ? __do_page_fault+0x159/0xad0 [ 327.568455] ? retint_kernel+0x2d/0x2d [ 327.572338] ? copy_mount_string+0x40/0x40 [ 327.576582] ? memset+0x20/0x40 [ 327.579865] ? copy_mount_options+0x1fa/0x2f0 [ 327.584359] ? copy_mnt_ns+0xa30/0xa30 [ 327.588244] SyS_mount+0xa8/0x120 [ 327.591692] ? copy_mnt_ns+0xa30/0xa30 [ 327.595578] do_syscall_64+0x1d5/0x640 [ 327.599469] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 327.604654] RIP: 0033:0x7f8777d7c63a [ 327.608355] RSP: 002b:00007f87766eff88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 327.616058] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7c63a [ 327.623324] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007f87766effe0 [ 327.630589] RBP: 00007f87766f0020 R08: 00007f87766f0020 R09: 0000000020000400 [ 327.637855] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 [ 327.645117] R13: 0000000020000440 R14: 00007f87766effe0 R15: 0000000020000580 23:44:55 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x48040) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 23:44:55 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) 23:44:55 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 23:44:55 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) 23:44:55 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 54) 23:44:55 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 56) 23:44:55 executing program 5: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x2}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x1f}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200580c0}, 0x24000040) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 23:44:55 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) [ 327.813813] FAULT_INJECTION: forcing a failure. [ 327.813813] name failslab, interval 1, probability 0, space 0, times 0 [ 327.833363] FAULT_INJECTION: forcing a failure. [ 327.833363] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 327.837579] CPU: 0 PID: 13639 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 327.853082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.862441] Call Trace: [ 327.865015] dump_stack+0x1b2/0x281 [ 327.868638] should_fail.cold+0x10a/0x149 [ 327.872772] should_failslab+0xd6/0x130 [ 327.876728] kmem_cache_alloc_trace+0x29a/0x3d0 [ 327.881381] ? set_bdev_super+0x110/0x110 [ 327.885509] sget_userns+0x102/0xc10 [ 327.889219] ? set_bdev_super+0x110/0x110 [ 327.893351] ? ns_test_super+0x50/0x50 [ 327.897221] ? set_bdev_super+0x110/0x110 [ 327.901374] ? ns_test_super+0x50/0x50 [ 327.905262] sget+0xd1/0x110 [ 327.908282] mount_bdev+0xcd/0x360 [ 327.911812] ? vxfs_try_sb_magic+0x3b0/0x3b0 [ 327.916222] mount_fs+0x92/0x2a0 [ 327.919576] vfs_kern_mount.part.0+0x5b/0x470 [ 327.924076] do_mount+0xe65/0x2a30 [ 327.927624] ? __do_page_fault+0x159/0xad0 [ 327.931841] ? retint_kernel+0x2d/0x2d [ 327.935709] ? copy_mount_string+0x40/0x40 [ 327.939936] ? memset+0x20/0x40 [ 327.943195] ? copy_mount_options+0x1fa/0x2f0 [ 327.947671] ? copy_mnt_ns+0xa30/0xa30 [ 327.951818] SyS_mount+0xa8/0x120 [ 327.955266] ? copy_mnt_ns+0xa30/0xa30 [ 327.959141] do_syscall_64+0x1d5/0x640 [ 327.963013] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 327.968186] RIP: 0033:0x7fdc4206263a [ 327.971875] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 327.979565] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc4206263a [ 327.987011] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007fdc409d5fe0 [ 327.994278] RBP: 00007fdc409d6020 R08: 00007fdc409d6020 R09: 0000000020000400 [ 328.001531] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 [ 328.008882] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 [ 328.016164] CPU: 1 PID: 13643 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 328.024138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.033495] Call Trace: [ 328.036100] dump_stack+0x1b2/0x281 [ 328.039740] should_fail.cold+0x10a/0x149 [ 328.043887] ? get_page_from_freelist+0xaf6/0x25a0 [ 328.048822] __alloc_pages_nodemask+0x22c/0x2720 [ 328.053583] ? lock_downgrade+0x740/0x740 [ 328.057745] ? page_outside_zone_boundaries+0x1db/0x310 [ 328.063113] ? __lock_acquire+0x5fc/0x3f20 [ 328.067353] ? preempt_count_add+0xaf/0x170 [ 328.071724] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 328.076584] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 328.082036] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 328.087054] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 328.092072] cache_grow_begin+0x91/0x700 [ 328.096131] ? fs_reclaim_release+0xd0/0x110 [ 328.100548] ? check_preemption_disabled+0x35/0x240 [ 328.105571] cache_alloc_refill+0x273/0x350 [ 328.109902] kmem_cache_alloc+0x333/0x3c0 [ 328.114056] getname_kernel+0x4e/0x340 [ 328.117951] kern_path+0x1b/0x40 [ 328.121321] lookup_bdev+0xc6/0x1c0 [ 328.124948] ? bd_acquire+0x440/0x440 [ 328.128747] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 328.134202] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 328.139218] blkdev_get_by_path+0x1b/0xa0 [ 328.143365] mount_bdev+0x4c/0x360 [ 328.146915] ? vxfs_try_sb_magic+0x3b0/0x3b0 [ 328.151338] mount_fs+0x92/0x2a0 [ 328.154703] vfs_kern_mount.part.0+0x5b/0x470 [ 328.159188] do_mount+0xe65/0x2a30 [ 328.162735] ? __do_page_fault+0x159/0xad0 [ 328.166953] ? retint_kernel+0x2d/0x2d [ 328.170824] ? copy_mount_string+0x40/0x40 [ 328.175039] ? memset+0x20/0x40 [ 328.178299] ? copy_mount_options+0x1fa/0x2f0 [ 328.182773] ? copy_mnt_ns+0xa30/0xa30 [ 328.186725] SyS_mount+0xa8/0x120 [ 328.190155] ? copy_mnt_ns+0xa30/0xa30 [ 328.194031] do_syscall_64+0x1d5/0x640 [ 328.197915] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 328.203086] RIP: 0033:0x7f8777d7c63a [ 328.206775] RSP: 002b:00007f87766eff88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 23:44:56 executing program 0: openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 23:44:56 executing program 5: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x2}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x1f}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200580c0}, 0x24000040) (async) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) [ 328.214524] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7c63a [ 328.221796] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007f87766effe0 [ 328.229065] RBP: 00007f87766f0020 R08: 00007f87766f0020 R09: 0000000020000400 [ 328.236324] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 [ 328.243585] R13: 0000000020000440 R14: 00007f87766effe0 R15: 0000000020000580 23:44:56 executing program 2: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 57) 23:44:56 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x48040) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 23:44:56 executing program 5: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x2}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x1f}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200580c0}, 0x24000040) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) [ 328.263643] vxfs: WRONG superblock magic 00000000 at 1 [ 328.270613] vxfs: WRONG superblock magic 00000000 at 8 [ 328.285508] vxfs: can't find superblock. 23:44:56 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) 23:44:56 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, &(0x7f0000000100)=""/160, 0xa0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) 23:44:56 executing program 3: syz_mount_image$vxfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) (fail_nth: 55) 23:44:56 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dvmrp0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 23:44:56 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x48040) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) [ 328.326205] FAULT_INJECTION: forcing a failure. [ 328.326205] name failslab, interval 1, probability 0, space 0, times 0 [ 328.377821] CPU: 1 PID: 13668 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 328.385737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.395092] Call Trace: [ 328.397681] dump_stack+0x1b2/0x281 [ 328.401314] should_fail.cold+0x10a/0x149 [ 328.405467] should_failslab+0xd6/0x130 [ 328.409445] __kmalloc+0x2c1/0x400 [ 328.412984] ? register_shrinker+0x1ab/0x220 [ 328.417395] register_shrinker+0x1ab/0x220 [ 328.421630] sget_userns+0x9aa/0xc10 [ 328.425338] ? set_bdev_super+0x110/0x110 [ 328.429486] ? ns_test_super+0x50/0x50 [ 328.433373] ? set_bdev_super+0x110/0x110 [ 328.437546] ? ns_test_super+0x50/0x50 [ 328.441434] sget+0xd1/0x110 [ 328.444468] mount_bdev+0xcd/0x360 [ 328.448352] ? vxfs_try_sb_magic+0x3b0/0x3b0 [ 328.452761] mount_fs+0x92/0x2a0 [ 328.456215] vfs_kern_mount.part.0+0x5b/0x470 [ 328.460711] do_mount+0xe65/0x2a30 [ 328.464252] ? __do_page_fault+0x159/0xad0 [ 328.468485] ? retint_kernel+0x2d/0x2d [ 328.472370] ? copy_mount_string+0x40/0x40 [ 328.476604] ? memset+0x20/0x40 [ 328.479895] ? copy_mount_options+0x1fa/0x2f0 [ 328.484392] ? copy_mnt_ns+0xa30/0xa30 [ 328.488283] SyS_mount+0xa8/0x120 [ 328.491737] ? copy_mnt_ns+0xa30/0xa30 [ 328.495643] do_syscall_64+0x1d5/0x640 [ 328.499650] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 328.504837] RIP: 0033:0x7fdc4206263a [ 328.508548] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 328.516269] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc4206263a [ 328.520971] FAULT_INJECTION: forcing a failure. 23:44:56 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x48040) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 23:44:56 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x48040) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 23:44:56 executing program 0: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) [ 328.520971] name failslab, interval 1, probability 0, space 0, times 0 [ 328.523533] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007fdc409d5fe0 [ 328.523543] RBP: 00007fdc409d6020 R08: 00007fdc409d6020 R09: 0000000020000400 [ 328.523547] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 [ 328.523552] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 [ 328.611203] CPU: 0 PID: 13682 Comm: syz-executor.3 Not tainted 4.14.284-syzkaller #0 [ 328.619120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.628586] Call Trace: [ 328.631177] dump_stack+0x1b2/0x281 [ 328.634811] should_fail.cold+0x10a/0x149 [ 328.636572] ------------[ cut here ]------------ [ 328.639129] should_failslab+0xd6/0x130 [ 328.643877] WARNING: CPU: 1 PID: 13668 at fs/super.c:1163 kill_block_super+0xbe/0xe0 [ 328.647831] __kmalloc+0x2c1/0x400 [ 328.655681] Kernel panic - not syncing: panic_on_warn set ... [ 328.655681] [ 328.659202] ? __list_lru_init+0x67/0x710 [ 328.670657] __list_lru_init+0x67/0x710 [ 328.674631] sget_userns+0x4e4/0xc10 [ 328.678341] ? set_bdev_super+0x110/0x110 [ 328.682536] ? ns_test_super+0x50/0x50 [ 328.686454] ? set_bdev_super+0x110/0x110 [ 328.690581] ? ns_test_super+0x50/0x50 [ 328.694461] sget+0xd1/0x110 [ 328.697465] mount_bdev+0xcd/0x360 [ 328.700987] ? vxfs_try_sb_magic+0x3b0/0x3b0 [ 328.705378] mount_fs+0x92/0x2a0 [ 328.708730] vfs_kern_mount.part.0+0x5b/0x470 [ 328.713207] do_mount+0xe65/0x2a30 [ 328.716758] ? __do_page_fault+0x159/0xad0 [ 328.720973] ? retint_kernel+0x2d/0x2d [ 328.724842] ? copy_mount_string+0x40/0x40 [ 328.729060] ? memset+0x20/0x40 [ 328.732320] ? copy_mount_options+0x1fa/0x2f0 [ 328.736796] ? copy_mnt_ns+0xa30/0xa30 [ 328.740665] SyS_mount+0xa8/0x120 [ 328.745577] ? copy_mnt_ns+0xa30/0xa30 [ 328.749449] do_syscall_64+0x1d5/0x640 [ 328.753322] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 328.758504] RIP: 0033:0x7f8777d7c63a [ 328.762194] RSP: 002b:00007f87766eff88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 328.769898] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007f8777d7c63a [ 328.777147] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007f87766effe0 [ 328.784416] RBP: 00007f87766f0020 R08: 00007f87766f0020 R09: 0000000020000400 [ 328.791682] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 [ 328.798946] R13: 0000000020000440 R14: 00007f87766effe0 R15: 0000000020000580 23:44:56 executing program 5: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dvmrp0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dvmrp0\x00'}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) [ 328.806210] CPU: 1 PID: 13668 Comm: syz-executor.2 Not tainted 4.14.284-syzkaller #0 [ 328.814097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.823446] Call Trace: [ 328.826045] dump_stack+0x1b2/0x281 [ 328.829676] panic+0x1f9/0x42d [ 328.832865] ? add_taint.cold+0x16/0x16 [ 328.836945] ? kill_block_super+0xbe/0xe0 [ 328.841093] ? __warn.cold+0x5/0x44 [ 328.844719] ? kill_block_super+0xbe/0xe0 [ 328.848869] __warn.cold+0x20/0x44 [ 328.852405] ? ist_end_non_atomic+0x10/0x10 [ 328.856724] ? kill_block_super+0xbe/0xe0 [ 328.860870] report_bug+0x208/0x250 [ 328.864500] do_error_trap+0x195/0x2d0 [ 328.868395] ? math_error+0x2d0/0x2d0 [ 328.872198] ? retint_kernel+0x2d/0x2d [ 328.876098] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 328.880943] invalid_op+0x1b/0x40 [ 328.884399] RIP: 0010:kill_block_super+0xbe/0xe0 [ 328.889145] RSP: 0018:ffff8880969cfbc8 EFLAGS: 00010246 [ 328.894501] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc900071f1000 [ 328.901761] RDX: 0000000000040000 RSI: ffffffff818760ae RDI: ffff8880b1d975b0 [ 328.909012] RBP: ffff88808f696c80 R08: ffffffff8b9b02c0 R09: 0000000000000001 [ 328.916259] R10: 0000000000000000 R11: ffff8880b4188500 R12: ffff8880b1d97100 [ 328.923509] R13: ffffffff890c6130 R14: ffffffff88f45680 R15: dffffc0000000000 [ 328.930770] ? kill_block_super+0xbe/0xe0 [ 328.934901] ? kill_block_super+0xbe/0xe0 [ 328.939032] deactivate_locked_super+0x6c/0xd0 [ 328.943597] sget_userns+0x9c4/0xc10 [ 328.947300] ? set_bdev_super+0x110/0x110 [ 328.951443] ? ns_test_super+0x50/0x50 [ 328.955311] ? set_bdev_super+0x110/0x110 [ 328.959436] ? ns_test_super+0x50/0x50 [ 328.963307] sget+0xd1/0x110 [ 328.966312] mount_bdev+0xcd/0x360 [ 328.969832] ? vxfs_try_sb_magic+0x3b0/0x3b0 [ 328.974339] mount_fs+0x92/0x2a0 [ 328.977772] vfs_kern_mount.part.0+0x5b/0x470 [ 328.982253] do_mount+0xe65/0x2a30 [ 328.985777] ? __do_page_fault+0x159/0xad0 [ 328.990021] ? retint_kernel+0x2d/0x2d [ 328.994283] ? copy_mount_string+0x40/0x40 [ 328.998514] ? memset+0x20/0x40 [ 329.001812] ? copy_mount_options+0x1fa/0x2f0 [ 329.006653] ? copy_mnt_ns+0xa30/0xa30 [ 329.010530] SyS_mount+0xa8/0x120 [ 329.014097] ? copy_mnt_ns+0xa30/0xa30 [ 329.017972] do_syscall_64+0x1d5/0x640 [ 329.021862] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 329.027121] RIP: 0033:0x7fdc4206263a [ 329.030920] RSP: 002b:00007fdc409d5f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 329.038631] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 00007fdc4206263a [ 329.045890] RDX: 0000000020000400 RSI: 0000000020000440 RDI: 00007fdc409d5fe0 [ 329.053558] RBP: 00007fdc409d6020 R08: 00007fdc409d6020 R09: 0000000020000400 [ 329.060812] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000400 [ 329.068068] R13: 0000000020000440 R14: 00007fdc409d5fe0 R15: 0000000020000580 [ 329.075706] Kernel Offset: disabled [ 329.079395] Rebooting in 86400 seconds..