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", 0x1000}, {&(0x7f0000002b80)="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", 0x1000}], 0x8, &(0x7f0000003f80)=[@cred={{0x1c, 0x1, 0x2, {r15, r16, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r17, r19, r0, r20, r21, r22, r2]}}, @cred={{0x1c, 0x1, 0x2, {r24, r26, r28}}}, @rights={{0x20, 0x1, 0x1, [r29, r30, r1, r31]}}, @cred={{0x1c, 0x1, 0x2, {r35, r36, r38}}}, @cred={{0x1c, 0x1, 0x2, {r41, r43, r45}}}, @rights={{0x18, 0x1, 0x1, [r0, r46]}}, @cred={{0x1c, 0x1, 0x2, {r49, r51, r53}}}], 0x108, 0x20008000}], 0x2, 0x4) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r55 = dup(r54) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r55, 0x0) r56 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r56, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r58 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r58, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r60 = dup(r59) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r60, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r60, 0x5386, &(0x7f00000000c0)) r61 = dup(r57) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7, 0x2b, 0x1, r61}) lseek(r62, 0x0, 0x4) 18:43:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = accept4$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000)=0x8001, 0x4) recvfrom(r5, &(0x7f00000000c0)=""/71, 0x47, 0x1, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) 18:43:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioprio_get$uid(0x3, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) openat$cgroup_type(r0, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000200)={{0x9, 0x8}, 'port1\x00\x00\x00\x00\xfa\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbce\\\xe6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\xe8\xff\x00', 0x129, 0x20400, 0x5, 0xfff, 0x9, 0x3912, 0xfffffffa, 0x0, 0x4, 0x401}) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000000c0)={0x0, 0x0, @ioapic}) [ 1361.423195][T28076] input: syz1 as /devices/virtual/input/input1237 [ 1361.492622][T28076] input: syz1 as /devices/virtual/input/input1238 18:43:36 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fl\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1361.578622][T28080] input: syz1 as /devices/virtual/input/input1240 [ 1361.682560][T28076] input: syz1 as /devices/virtual/input/input1241 18:43:36 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) lseek(0xffffffffffffffff, 0x0, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) [ 1361.735224][T28080] input: syz1 as /devices/virtual/input/input1242 18:43:36 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept$alg(r3, 0x0, 0x0) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) recvmmsg(r4, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) accept(r1, 0x0, 0x0) 18:43:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x42240) write$smack_current(r2, &(0x7f0000000080)='/dev/urandom\x00', 0xd) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) [ 1361.909240][T28076] x86/PAT: syz-executor.5:28076 map pfn RAM range req write-combining for [mem 0x3e550000-0x3e550fff], got write-back [ 1362.031124][T28080] x86/PAT: syz-executor.5:28080 map pfn RAM range req write-combining for [mem 0x3e570000-0x3e570fff], got write-back 18:43:36 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fo\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1362.127180][T28118] input: syz1 as /devices/virtual/input/input1243 [ 1362.292122][T28118] input: syz1 as /devices/virtual/input/input1244 [ 1362.442321][T28080] x86/PAT: syz-executor.5:28080 map pfn RAM range req write-combining for [mem 0x3e570000-0x3e570fff], got write-back 18:43:37 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000000)) 18:43:37 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000100)=0x3, 0x4) lseek(r1, 0x0, 0x2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x6]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setown(r1, 0x8, r4) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r7, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r9, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r10, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r10, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r10, 0x5501, 0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f00000000c0)=[r8, r0, r9, r10, r3, r1], 0x6) 18:43:37 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) r5 = accept$alg(r3, 0x0, 0x0) accept(r5, 0x0, 0x0) 18:43:37 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fp\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:37 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000240)=@v2={0x2, @aes256, 0x902b4e279fe16cd7, [], "d54637c529287f06d38de7a07b092d5c"}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000380)='team\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_OIF={0x8, 0x4, r5}]}, 0x24}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000400)={@dev, 0x0}, &(0x7f0000000440)=0x14) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockname$packet(r8, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x11, 0x800000003, 0x0) bind(r11, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_OIF={0x8, 0x4, r12}]}, 0x24}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x11, 0x800000003, 0x0) bind(r14, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r14, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_OIF={0x8, 0x4, r15}]}, 0x24}}, 0x0) getpeername$packet(r0, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000900)=0x14) r17 = socket(0x11, 0x800000003, 0x0) bind(r17, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r17, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_IP_XFRM_POLICY(r17, 0x0, 0x11, &(0x7f0000002000)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000002100)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002380)={&(0x7f0000002180)={0x1f8, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r9}, {0x84, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffffb3}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0xbc, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x42}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r18}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}]}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) connect$can_bcm(r1, &(0x7f0000000480), 0x10) r20 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x2, 0x2) setsockopt$CAIFSO_LINK_SELECT(r20, 0x116, 0x7f, &(0x7f0000000200)=0x400, 0x4) r21 = socket(0x1, 0x2, 0x0) getsockname$packet(r21, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r22}, 0xffffffffffffffd3, &(0x7f0000000100)={&(0x7f0000000940)={0x0, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x1f, 0x2, 0x0, 0x0, "0a627dc300a82cae375fe67f9103fa30abfc2d12d478f474681bc914c2a30b0b3af068ab6a18c85bd34143168581c0b28b4b3b17a9de1c388d1fcef23e7bd884"}}, 0x80}}, 0x0) r23 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r23, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0xeded, 0x4) lseek(r24, 0x0, 0x4) r25 = socket(0x11, 0x800000003, 0x0) bind(r25, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r25, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet6_MCAST_MSFILTER(r20, 0x29, 0x30, &(0x7f00000004c0)={0x92b7, {{0xa, 0x4e21, 0xd4c, @dev={0xfe, 0x80, [], 0x27}, 0x2}}, 0x0, 0x5, [{{0xa, 0x4e22, 0x6, @mcast1, 0x8}}, {{0xa, 0x4e20, 0x579, @loopback, 0x5}}, {{0xa, 0x4e21, 0x2, @remote, 0x5}}, {{0xa, 0x4, 0x4, @mcast1, 0xff}}, {{0xa, 0x4e22, 0x800, @ipv4={[], [], @empty}, 0x1}}]}, 0x310) r26 = socket$inet6_sctp(0xa, 0x1, 0x84) r27 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r27, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01060000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r26, 0x84, 0x7b, &(0x7f00000000c0)={r28}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r25, 0x84, 0x9, &(0x7f0000000280)={r28, @in6={{0xa, 0x4e23, 0x3, @local, 0x5ed9}}, 0x23, 0x2, 0x2, 0x1, 0x3c}, 0x98) [ 1362.725575][T28141] input: syz1 as /devices/virtual/input/input1245 [ 1362.745192][T28142] input: syz1 as /devices/virtual/input/input1246 [ 1362.835978][T28142] x86/PAT: syz-executor.3:28142 map pfn RAM range req write-combining for [mem 0x3e590000-0x3e590fff], got write-back [ 1362.940789][T28146] input: syz1 as /devices/virtual/input/input1247 [ 1363.018979][T28142] input: syz1 as /devices/virtual/input/input1248 [ 1363.116431][T28150] input: syz1 as /devices/virtual/input/input1249 [ 1363.193802][T28142] input: syz1 as /devices/virtual/input/input1250 18:43:37 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fu\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:37 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r5, 0x4040ae72, &(0x7f0000000000)={0x1f, 0x61fa, 0x2, 0x0, 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) accept(r7, 0x0, 0x0) [ 1363.396055][T28175] x86/PAT: syz-executor.2:28175 map pfn RAM range req write-combining for [mem 0x45510000-0x45510fff], got write-back [ 1363.498235][T28150] input: syz1 as /devices/virtual/input/input1251 [ 1363.535553][T28178] x86/PAT: syz-executor.2:28178 map pfn RAM range req write-combining for [mem 0x3e5d0000-0x3e5d0fff], got write-back [ 1363.579306][T28150] x86/PAT: syz-executor.3:28150 map pfn RAM range req write-combining for [mem 0x3e5e0000-0x3e5e0fff], got write-back 18:43:38 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fx\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1363.683000][T28165] input: syz1 as /devices/virtual/input/input1252 18:43:38 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)={{0x108, 0x0, 0x5, 0x337, 0x32b, 0x4, 0x2d9, 0x2}, "02b2a30bb75b00e01753bfdb79b78a49915198d803218ee72d193cdb3cd3be3f79847fe29e00fcd48eb35731d11c7a0f542205429df3b1568ae01eb07bc6465c6db30bfa345240cc511d4ccb483874fbff3fa21f3f17af03b32d29403e8640dfc6f68e5d9d271641574cbc97551afd746f5eb853087aeb8afa4d15ea2609239c4b782049bc5c88786b331bc93a4577794f079ec4233a02b823c78bd672caee047e9b28896ea81e957353863b77142eac19a8bbaa826b094241cbb91f08dcbe06bde930710b2228b646275334d2a8a3a13a7d54b90fffe9db5a2d05fc1cdda67a177dad2bfa71711697164cc38ac831c206ca", [[], [], [], [], [], [], [], [], [], []]}, 0xb12) accept(r4, 0x0, 0x0) [ 1364.052009][T28201] input: syz1 as /devices/virtual/input/input1253 18:43:38 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x02', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x4) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00') r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x1, 0x40) connect$netrom(r4, &(0x7f00000001c0)={{0x3, @bcast, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x31b, @dev={0xfe, 0x80, [], 0x11}, 0x60}, 0x1c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x3) [ 1364.325367][T28213] input: syz1 as /devices/virtual/input/input1255 18:43:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) r5 = epoll_create1(0x0) r6 = getpgrp(0xffffffffffffffff) r7 = getpid() kcmp$KCMP_EPOLL_TFD(r7, r6, 0x7, r5, &(0x7f0000000000)) fcntl$setownex(r4, 0xf, &(0x7f00000001c0)={0x0, r6}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r11 = dup(r10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r11, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r11, 0xab07, 0x5) r12 = dup(r8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r12, 0x0) write$FUSE_WRITE(r12, &(0x7f0000000000)={0x18, 0x0, 0x6, {0x5}}, 0x18) r13 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000200)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='syz1\x00', r13) r14 = socket$inet(0x2, 0x4000000000000001, 0x0) r15 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xaa, 0x244100) ioctl$KVM_PPC_GET_PVINFO(r15, 0x4080aea1, &(0x7f0000000140)=""/117) bind$inet(r14, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r14, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r14, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:43:39 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x4) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) 18:43:39 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x03', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:39 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x600, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x4) 18:43:39 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0xa926, 0x8, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r9, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r9, 0xc018643a, &(0x7f0000000180)={0x0, 0x2, 0x29}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) ioctl$VHOST_GET_VRING_BASE(r6, 0xc008af12, &(0x7f0000000140)) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r10 = accept$alg(r3, 0x0, 0x0) accept(r10, 0x0, 0x0) 18:43:39 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x04', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:39 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) recvfrom$packet(r0, &(0x7f0000000280)=""/90, 0x5a, 0x100, &(0x7f00000003c0)={0x11, 0x1b, r1, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x71, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x491}, 0x1c) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10810}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x38, r7, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x800}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r7, 0x113, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7a8a}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4c49}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x40080) lseek(r5, 0x0, 0x2) 18:43:39 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8a2c00, 0x0) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0xfffe, 0x4, 0x7, 0x3f, 0x20, @random="f33fa007e27e"}, 0x10) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r2, 0x0, 0x4) [ 1364.961013][T28240] x86/PAT: syz-executor.2:28240 map pfn RAM range req write-combining for [mem 0x3e640000-0x3e640fff], got write-back [ 1365.119604][T28245] x86/PAT: syz-executor.2:28245 map pfn RAM range req write-combining for [mem 0x3e670000-0x3e670fff], got write-back 18:43:39 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000100)={{{@in=@initdev, @in=@initdev}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) accept(r4, 0x0, 0x0) 18:43:39 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x05', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:39 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = dup2(r2, r0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000000c0)={0x4, 0x0, [{0x2, 0x4, 0x0, 0x0, @sint={0x800, 0x3ff}}, {0x3, 0x3, 0x0, 0x0, @sint={0xe99b, 0xffff}}, {0x80, 0x3, 0x0, 0x0, @adapter={0x200, 0x7, 0x9, 0x100, 0x75}}, {0x101, 0x1, 0x0, 0x0, @adapter={0x8, 0x4, 0x80, 0x6, 0x3}}]}) lseek(r1, 0x0, 0x4) 18:43:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x10, 0x3) [ 1365.478002][T28268] input: syz1 as /devices/virtual/input/input1257 [ 1365.608808][T28276] input: syz1 as /devices/virtual/input/input1258 18:43:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x800000000510, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x9, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:43:40 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x483000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x2, 0x1, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) accept(r8, 0x0, 0x0) 18:43:40 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x06', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:40 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) socket$nl_crypto(0x10, 0x3, 0x15) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r7, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r7, 0x40086408, &(0x7f0000000000)={0x9, 0xd498}) lseek(r1, 0x0, 0x2) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000300)={'filter\x00', 0x1000, "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"}, &(0x7f0000001340)=0x1024) r10 = dup(r9) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r10, 0x0) r11 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x1, 0x20000) sendmsg$key(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x128}}, 0x24008000) ioctl$PPPIOCGDEBUG(r10, 0x80047441, &(0x7f00000000c0)) r12 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r12, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r14 = dup(r13) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r14, 0x0) ioctl$DRM_IOCTL_GET_CAP(r14, 0xc010640c, &(0x7f0000000140)={0x3ff, 0x800}) 18:43:40 executing program 5: pipe(&(0x7f0000000000)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x1, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa928, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000040)={{0x3, @name="e989fa387d6f3deccdf4121630ff4a5ad46cf34a8c40c0a177512c242d68cf1d"}, 0xfffffffffffffc39, 0x3ff, 0x1}) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xff}, 0x8) [ 1365.901931][T28295] x86/PAT: syz-executor.2:28295 map pfn RAM range req write-combining for [mem 0x3e6f0000-0x3e6f0fff], got write-back [ 1366.056146][T28305] x86/PAT: syz-executor.5:28305 map pfn RAM range req write-combining for [mem 0x3e740000-0x3e740fff], got write-back [ 1366.085338][T28303] input: syz1 as /devices/virtual/input/input1259 18:43:40 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x96, 0x101000) accept(r4, 0x0, 0x0) [ 1366.122783][T28303] x86/PAT: syz-executor.3:28303 map pfn RAM range req write-combining for [mem 0x3e750000-0x3e750fff], got write-back [ 1366.152349][T28311] x86/PAT: syz-executor.5:28311 map pfn RAM range req write-combining for [mem 0x3e770000-0x3e770fff], got write-back [ 1366.179657][T28303] x86/PAT: syz-executor.3:28303 map pfn RAM range req write-combining for [mem 0x3e780000-0x3e780fff], got write-back 18:43:41 executing program 5: truncate(&(0x7f0000000000)='./file0\x00', 0x8000) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x4) [ 1366.266991][T28312] x86/PAT: syz-executor.3:28312 map pfn RAM range req write-combining for [mem 0x3e790000-0x3e790fff], got write-back 18:43:41 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\a', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:41 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000100)=""/93, &(0x7f0000000180)=0x5d) r5 = accept$alg(r3, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) write$binfmt_elf32(r6, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xfa, 0x6, 0x2, 0x9, 0x3, 0x3, 0x6, 0x20b, 0x38, 0x205, 0x8, 0xe2b0, 0x20, 0x2, 0x5, 0x0, 0x8}, [{0x2, 0x6f2, 0x4, 0x8, 0xffffff01, 0xb6, 0x401, 0x7}], "bd14f6b4c6a25ef4bbb0a79df688d1e95cef99d4cba9f20ff1", [[], [], [], []]}, 0x471) accept(r5, 0x0, 0x0) [ 1366.412321][T28303] input: syz1 as /devices/virtual/input/input1260 18:43:41 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x2, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) arch_prctl$ARCH_SET_GS(0x1001, 0x9b85) fsetxattr$security_ima(r1, &(0x7f0000000000)='security.ima\x00', &(0x7f00000000c0)=@ng={0x4, 0x7, "3550deceb812b0897814"}, 0xc, 0x2) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) lseek(r2, 0x0, 0x0) 18:43:41 executing program 3: setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000), 0x4) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x8, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x2) [ 1366.627182][T28333] input: syz1 as /devices/virtual/input/input1261 18:43:41 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\b', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1366.805380][T28342] input: syz1 as /devices/virtual/input/input1262 18:43:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x4) write$P9_RLOCK(r2, &(0x7f00000000c0)={0x8, 0x35, 0x1, 0x2}, 0x8) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000140)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x2}) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x800, 0x0) r7 = openat(r6, &(0x7f0000000200)='./file0\x00', 0x800, 0x8) ioctl$RTC_IRQP_READ(r7, 0x8008700b, &(0x7f0000000240)) [ 1366.942144][T28351] input: syz1 as /devices/virtual/input/input1263 18:43:41 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x2) 18:43:41 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, {0x2, 0x4e24, @loopback}, 0x232, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000000)='gre0\x00', 0x1, 0x1000, 0x9}) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r5 = accept$alg(r3, 0x0, 0x0) accept(r5, 0x0, 0x0) [ 1367.095710][T28355] input: syz1 as /devices/virtual/input/input1264 18:43:41 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) lseek(0xffffffffffffffff, 0x2, 0x4) 18:43:42 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\t', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:42 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r2, 0x0, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e23, 0x4, @loopback, 0x20}}, 0x0, 0xffff, 0x0, "333cac3361e08b3dc86533b0c84cb31f893654e9e22fffa390106610c2ab87203d24f5810d13d41f5518239eb5dd5696000c8e46dc8f2310e43bd8260736fbe05d66194257ab48edc597dc9220f2ee7d"}, 0xd8) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000000c0)=""/127) 18:43:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x30051, r4, 0x0) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000000)) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000180)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) bind$pptp(r5, &(0x7f00000000c0)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) lseek(r1, 0x0, 0x4) 18:43:42 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) recvfrom$packet(r0, &(0x7f0000000100)=""/228, 0xe4, 0x180, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) accept(r5, 0x0, 0x0) 18:43:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) fsetxattr$security_smack_entry(r2, &(0x7f0000000000)='security.SMACK64EXEC\x00', &(0x7f00000000c0)='/dev/ion\x00', 0x9, 0x1) lseek(r1, 0x0, 0x2) 18:43:42 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\n', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1367.746027][T28394] x86/PAT: syz-executor.5:28394 map pfn RAM range req write-combining for [mem 0x39870000-0x39871fff], got write-back 18:43:42 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x39f7c091, 0x35315258, 0x1, @discrete={0x3, 0x44cf}}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000100)={0x0, @reserved}) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c000000d800ffcfce36877c8f33e7b42891b4c516f49370be888c53748c6f35c50c37d1c2f71bf6dd2d0fb496af490be4ff9ee1b1d7b0226e4086883d9149b0672f1e779ef502760c55718cd5707e50a922acde8347eaf40627c3f088882b5bdf421b2dcff26e35fa4fa27b1a268dfd7aa5cea55687d92fd9a3b5ec9a988f3381a7c51ea300548cd7112ee0ac60b8858b4898f2e330627b2de8673b882b2435e906065e513908353c226dc5712aeb0fbe7cfe3d5a98006c92b8d90c302bb5f765a922ad080000000000000054d0f586d45ff00f1f2b2a4f3293a29b4d5f"], 0xde) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r2, 0x0, 0x4) [ 1367.937024][T28403] input: syz1 as /devices/virtual/input/input1265 [ 1368.084400][T28406] input: syz1 as /devices/virtual/input/input1266 18:43:42 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xc01c0, 0x0) sendto(r0, &(0x7f0000000100)="991e8a4e369263c74a8979fcf03f2a2f2c829d5c0615c70f76f56a133bf828daa86b8f2d67313bd0e65b718ec8930d575b6c9f197309550ff09349683576396c77e327de1cb3306d57670eab9fb7c114634926bcbcce71130e5264ec2901f497b3f8a08677e4bae3802b44e448ce942c391da80d2221582b65e2de8ebb701e2a6b1e16452ac711f610e00ace4802436f367eee73016377b7664f386d71", 0x9d, 0x40005, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @local}, 0x0, 0x1, 0x0, 0x1}}, 0x80) r5 = accept$alg(r3, 0x0, 0x0) accept(r5, 0x0, 0x0) 18:43:43 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x200000000, 0x4) 18:43:43 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000180)={r5, 0x2d12, 0x1, [0x9]}, 0xa) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:43:43 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\f', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:43 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) accept(r4, 0x0, 0x0) 18:43:43 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, r1}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x0) r5 = socket(0xa, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r6) r7 = timerfd_create(0x0, 0x0) fstat(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r8, r8, 0x0) r9 = socket$inet(0x10, 0x3, 0x6) sendmsg(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000440001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f00000000c0)={0xa0, 0xfffffffffffffffe, 0x5, {{0x0, 0x0, 0x1, 0x800, 0x7, 0x8000, {0x6, 0x7, 0xff, 0x9, 0x0, 0x1, 0x6be, 0x8, 0x2, 0x7, 0x9, r6, r8, 0x401, 0x7}}, {0x0, 0x4}}}, 0xa0) lseek(r1, 0x0, 0x4) ioctl(r7, 0x6e, &(0x7f0000000180)="1d787fde545938765cbaa635944e87c3fc7546f4a49423416cb119060695c46dbbd2e5caf891a4d83ad647c48abcc1f1bdc8a7e83d6d4c6c9e5d64ced2d3c5a0f292cd27bb18ab52e3ff0a92fe3ef89ccd95bf41170fa983356115dd9c4b5cbf200412015d6348533b728370e4f415de0d8a04d7ada40f675476804766d62138b14f43fdea0cabc25313c369712133cba4007a6b136b868f83e3ae34ec85312d14def4d50dd3da763e2b5c5539c29f26a0535733a0b78705e3c53c") 18:43:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = dup(r1) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000003c0)=""/165) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000002c0)=0x4) lseek(r3, 0x0, 0x2) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x610302, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000000c0)={0x0, 0xfffffffffffffff7, 0x7, 0x7, 0x8, [{0x8, 0x5, 0x1000, 0x0, 0x0, 0x80c}, {0x4, 0x9, 0x7, 0x0, 0x0, 0x3481}, {0x5, 0x5, 0x7, 0x0, 0x0, 0x100}, {0x6f, 0x77f1, 0x3ff, 0x0, 0x0, 0x1}, {0x1f, 0x7, 0x8, 0x0, 0x0, 0x8}, {0x3, 0x9, 0x8a, 0x0, 0x0, 0x4}, {0xffffffffffffffff, 0x7, 0x8, 0x0, 0x0, 0x800}, {0x1, 0xc1e0, 0x15713de2, 0x0, 0x0, 0x200}]}) ioctl$KVM_GET_PIT2(r7, 0x8070ae9f, &(0x7f0000000340)) socket$unix(0x1, 0x2, 0x0) [ 1368.799766][T28450] x86/PAT: syz-executor.5:28450 map pfn RAM range req write-combining for [mem 0x39910000-0x39910fff], got write-back 18:43:43 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x10', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:43 executing program 2: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="040014000700810008000206"], 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0xfffffffffffffffc}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) getpeername$unix(r3, &(0x7f0000001e40)=@abs, &(0x7f0000000900)=0x6e) recvmmsg(r5, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)=""/174, 0xae}, {&(0x7f00000001c0)=""/207, 0xcf}, {&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f00000004c0)=""/73, 0x49}, {&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/91, 0x5b}, {&(0x7f00000006c0)=""/129, 0x81}], 0x8, &(0x7f0000000800)=""/225, 0xe1}, 0x705}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000900)}], 0x1, &(0x7f0000000980)=""/15, 0xf}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000009c0)=""/54, 0x36}, {&(0x7f0000000a00)=""/61, 0x3d}, {&(0x7f0000000a40)=""/189, 0xbd}], 0x3, &(0x7f0000000b40)=""/12, 0xc}}, {{&(0x7f0000000b80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/92, 0x5c}], 0x2, &(0x7f0000001cc0)=""/122, 0x7a}, 0x81}], 0x4, 0x20, 0x0) r6 = accept$alg(r5, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x7) accept(r6, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x9) [ 1368.948730][T28455] input: syz1 as /devices/virtual/input/input1267 18:43:43 executing program 5: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4f, 0xc8201) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x4, 0x70bd27, 0x21dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc1d267b337e4659a}, 0x40000) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x5) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r3, 0x0, 0x4) [ 1369.026833][T28455] x86/PAT: syz-executor.3:28455 map pfn RAM range req write-combining for [mem 0x39940000-0x39940fff], got write-back 18:43:44 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"/2087], 0x827) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r2, 0x0, 0x4) 18:43:44 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x14', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:44 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:43:44 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/deV/ion\x00', 0x54800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) sync_file_range(r5, 0x9, 0x7f, 0x0) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f00000000c0)={0x34}) lseek(r1, 0x0, 0x2) [ 1369.662511][T28494] x86/PAT: syz-executor.3:28494 map pfn RAM range req write-combining for [mem 0x39980000-0x39980fff], got write-back 18:43:44 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r5, 0x100}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={r6, 0x1000}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) accept(r8, 0x0, 0x0) [ 1369.740080][T28494] input: syz1 as /devices/virtual/input/input1269 18:43:44 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs#', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:44 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/213) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r2, 0x0, 0x4) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f00000001c0)={'IDLETIMER\x00'}, &(0x7f0000000200)=0x1e) 18:43:44 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) r5 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x800, 0x200) ioctl$TIOCLINUX3(r5, 0x541c, &(0x7f0000000100)) accept(r4, 0x0, 0x0) 18:43:44 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) 18:43:44 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x16) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r2, 0x0, 0x2) 18:43:44 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fsH', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1370.295458][T28522] input: syz1 as /devices/virtual/input/input1271 18:43:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x100004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) accept(r4, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)={0x68, r7, 0x5, 0x0, 0x0, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0xf00, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x410, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x840) 18:43:45 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x400000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000000)={0x2200, 0x3ff, 0x7fffffff, 0x3}) 18:43:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4100, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000380)={0xa, 0x4, 0xff, 0x2}, 0xa) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="98010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x40018) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 18:43:45 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fsL', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:45 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) fcntl$setpipe(r2, 0x407, 0x3) 18:43:45 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) accept4$rose(r2, &(0x7f00000000c0)=@short={0xb, @remote, @remote, 0x1, @default}, &(0x7f0000000100)=0x1c, 0x800) lseek(r1, 0x0, 0x4) 18:43:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x6, 0x200000) splice(r0, &(0x7f0000000000), r5, &(0x7f0000000140), 0x81, 0x4) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) dup(r6) accept(r4, 0x0, 0x0) 18:43:45 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x10\x00', 0x381400, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x2) 18:43:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) fdatasync(0xffffffffffffffff) 18:43:45 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs`', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$alg(0xffffffffffffffff, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x480000, 0x0) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x208c02, 0x82) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f00000001c0)={r5, 0x0, 0x3, 0xfff, 0xff}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000000100)={{0xf3660bc4493a0b66, 0x0, @identifier="70f4a49bb707a253143fe16250644a60"}}) accept(r3, 0x0, 0x0) 18:43:45 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2, 0x0, 0xffffffffffffffff}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x66fd22e3a3b56477, 0x0) lseek(r1, 0x0, 0x4) 18:43:45 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) prctl$PR_SET_TIMERSLACK(0x1d, 0x1f) lseek(r1, 0x0, 0x2) [ 1371.414169][T28587] input: syz1 as /devices/virtual/input/input1273 18:43:46 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x400000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x4) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x0) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000000000)) 18:43:46 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x1000, "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"}, &(0x7f0000001100)=0x1008) syz_open_dev$usbfs(&(0x7f0000001140)='/dev/bus/usb/00#/00#\x00', 0x7ff, 0x200000) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r3, 0x0, 0x2) 18:43:46 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fsh', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1371.722375][T28607] x86/PAT: syz-executor.5:28607 map pfn RAM range req write-combining for [mem 0x39a40000-0x39a40fff], got write-back 18:43:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) accept(r4, 0x0, 0x0) r5 = socket(0x11, 0x800000003, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r7, 0x415, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x14800480}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe4, r7, 0x4a6, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe769}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x44, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xcc}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6d723ae7}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0xbd94ac2aeddd4274}, 0x8001) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0xfffffffffffffe26) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000000380)={@x25={0x9, @null=' \x00'}, {&(0x7f0000000240)=""/215, 0xd7}, &(0x7f0000000340)}, 0xa0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r9, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0xc841) [ 1371.786448][T28611] x86/PAT: syz-executor.5:28611 map pfn RAM range req write-combining for [mem 0x39a80000-0x39a80fff], got write-back 18:43:46 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0xf21a, 0x519000) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) recvmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) r4 = accept(r3, &(0x7f00000002c0)=@rc, &(0x7f0000000000)=0xd8c169239e45976e) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x9}}, 0x7f, 0xffffd504, 0x5, 0xccd7, 0x2}, &(0x7f0000000400)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000440)={r6, @in6={{0xa, 0x4e20, 0x7fff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x40}}, 0xe8dc, 0x5, 0x80000000, 0x9, 0x41}, 0x98) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f0000000140)=0x7fffffff, 0x4) lseek(r1, 0x0, 0x4) epoll_create1(0x0) r7 = getpgrp(0xffffffffffffffff) getpid() r8 = pidfd_open(r7, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x458280, 0x0) r11 = syz_open_dev$dmmidi(&(0x7f0000000580)='/dev/dmmidi#\x00', 0xa91f, 0x280) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f00000005c0)={0x80000001, 0x10, 0x0, r11}) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r13 = dup(r12) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r13, 0x0) ioctl$TIOCLINUX3(r13, 0x541c, &(0x7f0000000500)) pidfd_send_signal(r8, 0x16, &(0x7f0000000180)={0x2e, 0xc8f5, 0x2}, 0x0) 18:43:46 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000140)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:43:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept$alg(r2, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000100)={0x10000, 0x20, 0x14f, {r4, r5+30000000}, 0x10000, 0x1}) [ 1372.166383][T28630] x86/PAT: syz-executor.5:28630 map pfn RAM range req write-combining for [mem 0x39ac0000-0x39ac0fff], got write-back 18:43:46 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fsl', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:47 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x4) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r1) ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f0000000100)=0x6) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f00000000c0)) 18:43:47 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x101000, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x25f) accept(0xffffffffffffffff, 0x0, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2240, 0x0) r7 = socket$caif_seqpacket(0x25, 0x5, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x20040, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) recvmmsg(r7, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000140)={r7}) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x5) 18:43:47 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fst', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:47 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0xc6051bef262b2769, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x48040) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{0x4, 0x0, 0x2, 0x7ff, 'syz1\x00', 0x7ff}, 0x1, 0x0, 0x200, r3, 0x9, 0x53bc, 'syz1\x00', &(0x7f0000000100)=['\x00', '/dev/ion\x00', '-.]\x00', '/dev/ion\x00', '{procem0\x00', 'md5sumeth0system\x00', '\x00', '}$\x00', '/dev/ion\x00'], 0x3e, [], [0x7ff, 0xfffe, 0x7, 0x2]}) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000280)) lseek(r1, 0x0, 0x4) 18:43:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:43:47 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000140)={'nlmon0\x00', 0x0, 0x4}) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) lseek(r3, 0xfffffffffffffffc, 0x3) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x10002) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f00000000c0)) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000240)={0x9, 0x9, 0x5}) 18:43:47 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fsz', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1373.270300][T28677] input: syz1 as /devices/virtual/input/input1275 [ 1373.318034][T28677] input: syz1 as /devices/virtual/input/input1276 [ 1373.461959][T28677] input: syz1 as /devices/virtual/input/input1277 18:43:48 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x0, @empty, 0x2}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x7fff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}, @in={0x2, 0x4e23, @loopback}], 0x68) recvmmsg(r1, &(0x7f0000003480)=[{{&(0x7f0000000300)=@x25={0x9, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000380)=""/165, 0xa5}], 0x1, &(0x7f0000000440)=""/91, 0x5b}}, {{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000007c0)}, 0xfffff87d}, {{&(0x7f0000000800)=@nfc, 0x80, &(0x7f0000001b80), 0x6}, 0x8}, {{&(0x7f0000001c00)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c80)=""/129, 0x81}], 0x1, &(0x7f0000001d80)=""/145, 0x91}, 0x5}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001e40)=""/253, 0xfd}, {&(0x7f0000001f40)=""/147, 0x93}], 0x1000000000000127}, 0x7}, {{&(0x7f0000002040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000020c0), 0x1da771fa2d1119eb, &(0x7f0000002100)=""/4096, 0x1000}, 0x9df4}, {{&(0x7f0000003100)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000003180)=[{&(0x7f0000003240)=""/156, 0x9c}, {&(0x7f0000003640)=""/251, 0xfb}], 0x2, &(0x7f0000003400)=""/102, 0x66}, 0x3}], 0x7, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'vlan0\x00', &(0x7f0000000200)=ANY=[]}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xfff, 0x2b, 0x0, 0xffffffffffffffff}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) r7 = epoll_create1(0x0) r8 = getpgrp(0xffffffffffffffff) r9 = getpid() kcmp$KCMP_EPOLL_TFD(r9, r8, 0x7, r7, &(0x7f0000000000)) ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f00000020c0)=r9) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r10 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r10, 0x0) ioctl$VIDIOC_DECODER_CMD(r10, 0xc0485660, &(0x7f0000000280)={0x6, 0x0, @start={0xf916, 0x1}}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept$alg(r11, 0x0, 0x0) r12 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) getsockopt$rose(r12, 0x104, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r13 = socket$caif_seqpacket(0x25, 0x5, 0x0) recvmmsg(r13, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) accept(r14, 0x0, 0x0) 18:43:48 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x46400, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x4) 18:43:48 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\xb4', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1373.817820][T28697] x86/PAT: syz-executor.2:28697 map pfn RAM range req write-combining for [mem 0x39b20000-0x39b20fff], got write-back [ 1373.885557][T28697] x86/PAT: syz-executor.2:28697 map pfn RAM range req write-combining for [mem 0x39afd000-0x39afdfff], got write-back 18:43:48 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x800}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) lseek(r1, 0x0, 0x0) 18:43:48 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x150, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xc0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0d8875}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x28ad}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast2, 0x7fffffff}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x10000}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'teql0\x00'}}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x37527e3f2010fe0e}, 0x4000000) r3 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:43:48 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1374.384186][T28723] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1374.454868][T28723] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1374.491466][T28723] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:43:49 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x104001, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000c40)={{0x7f, 0x8, 0x80, 0xff, 0x9, 0x7}, 0x1, 0x9, 0x1ff}) epoll_wait(r6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x6, 0x7) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x410000, 0x0) write$binfmt_aout(r7, &(0x7f00000001c0)={{0x108, 0x8, 0x8, 0x3d2, 0x1fe, 0x401, 0x2a9, 0x400}, "ac9bd72b2d23e6bb5b73cfda4efde72e99451b06b594ef468d57f828ce2e6aef73089ec789833f5baa8c45847e470e2b748ecc7badcbae8ac5ffc4a47347ec29d66498970186c32dff8c9bfd99b255ff089026ea095c510dd905a735e5", [[], [], [], [], [], [], [], [], [], []]}, 0xa7d) r8 = accept$alg(r3, 0x0, 0x0) accept(r8, 0x0, 0x0) [ 1374.516404][T28723] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1374.601543][T28729] x86/PAT: syz-executor.2:28729 map pfn RAM range req write-combining for [mem 0x39b50000-0x39b50fff], got write-back [ 1374.625897][T28723] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1374.655936][T28723] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1374.680232][T28723] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:43:49 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000240)={[{0xf6a, 0x6d, 0x5, 0x5, 0x9, 0x46, 0x2, 0x8, 0x1f, 0x5, 0x7f, 0x8, 0x42cd}, {0x1f, 0x0, 0xd2, 0x0, 0x5, 0x1f, 0x6, 0x0, 0x8, 0x2, 0xd3, 0x1, 0x81}, {0x81, 0x40, 0xf7, 0x1, 0x2, 0xa5, 0x40, 0x4, 0x3, 0x5, 0x4, 0x1, 0x8}], 0x2}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) ioctl$LOOP_SET_DIRECT_IO(r5, 0x4c08, 0x5) r6 = dup(r2) r7 = dup(0xffffffffffffffff) ioctl$SG_GET_REQUEST_TABLE(r7, 0x2286, &(0x7f00000000c0)) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000000c0)={r11}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f00000002c0)={r11, 0xf2, "00ede13e38af383a61bbc90a6f2f56f935ff3f9645f528178bb4e4d252549cb0a30d3611f21503bf355e90c1c453d297c186b13ed8c08efc9a8740580af3979e734f8043d1ba1c60c30cec6a7dd35cd99b9a80d7b1b4c76457243a5fe07c4f0f9e7d3f2bf626c741a27479b7c8deb845e1b1ca72f401bddb88f370c9c7bf84906d5e3f2d1fe01e454a079fe0cb2ae9b5647c6a1cf09a598b09e7d27f6e620355c0be7df4d7bf414c2c6e2012961d33374a7519bc658165c4e81ff616e0115e24a02998585c79116784fe8bcd7a2415df66c74005a83c73a0f89c7139b664ff7432dbd7ddfffa44421fec0b5a9a66677c1198"}, &(0x7f00000003c0)=0xfa) r13 = epoll_create1(0x0) r14 = getpgrp(0xffffffffffffffff) r15 = getpid() kcmp$KCMP_EPOLL_TFD(r15, r14, 0x7, r13, &(0x7f0000000000)) getpgrp(r15) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000400)={r12, 0x5}, 0x8) ioctl$DRM_IOCTL_ADD_BUFS(r6, 0xc0206416, &(0x7f0000000000)={0x3, 0x3, 0xffff0000, 0x1, 0x1e, 0x800}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r16, 0x0, 0x4) [ 1374.699176][T28723] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1374.721787][T28729] x86/PAT: syz-executor.2:28729 map pfn RAM range req write-combining for [mem 0x39b60000-0x39b60fff], got write-back 18:43:49 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs*', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:49 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x100) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x100, 0x4, 0x2001, 0x4, 0x5, 0x3, 0x3, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) accept(r5, 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x7ff) [ 1374.849189][T28736] x86/PAT: syz-executor.5:28736 map pfn RAM range req write-combining for [mem 0x39b80000-0x39b80fff], got write-back [ 1374.939697][T28736] x86/PAT: syz-executor.5:28736 map pfn RAM range req write-combining for [mem 0x39b70000-0x39b70fff], got write-back 18:43:49 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs^', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:49 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) 18:43:50 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) accept(r4, 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000100)={0xf6, 0x8a, "7145bae102c0c9acd921d3c33b834cda30f40524351cc7bbf57b46e338b845e48b35f0b659ba169b255364359d23b9fd0c5236129bc403285f66aa5a8e13d4fc0a31cff719bcf57943d5aef8a5d6b70591f2873623c856f48c60cac64611c69134cb9566268257648f7bd5136ce736902529ad6a419389e4fc41b90ae2ff11d00c78c6fb10afe7c7db38"}) 18:43:50 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_OIF={0x8, 0x4, r10}]}, 0x24}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x11, 0x800000003, 0x0) bind(r13, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r13, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_OIF={0x8, 0x4, r14}]}, 0x24}}, 0x0) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1182100}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x188, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0x16c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}]}}]}, 0x188}, 0x1, 0x0, 0x0, 0x22004000}, 0x80) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:43:50 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs_', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000100)={0x0, 0x3, 0x9, &(0x7f0000000000)=0x1}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) accept(r7, 0x0, 0x0) 18:43:50 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x10000, 0xb71f1b82c71d3acd) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x7, 0xa, 0x0, r4}) lseek(r5, 0x0, 0x4) [ 1375.700951][T28776] input: syz1 as /devices/virtual/input/input1278 [ 1375.769694][T28776] x86/PAT: syz-executor.5:28776 map pfn RAM range req write-combining for [mem 0x39bc0000-0x39bc0fff], got write-back [ 1375.805418][T28782] x86/PAT: syz-executor.2:28782 map pfn RAM range req write-combining for [mem 0x39bd0000-0x39bd0fff], got write-back [ 1375.923756][T28776] input: syz1 as /devices/virtual/input/input1279 [ 1375.959017][T28782] x86/PAT: syz-executor.2:28782 map pfn RAM range req write-combining for [mem 0x39be0000-0x39be0fff], got write-back 18:43:50 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs`', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:50 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x4) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x40}) 18:43:50 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) accept(r5, 0x0, 0x0) [ 1376.280497][T28802] x86/PAT: syz-executor.5:28802 map pfn RAM range req write-combining for [mem 0x3a000000-0x3a000fff], got write-back [ 1376.313583][T28803] input: syz1 as /devices/virtual/input/input1280 [ 1376.412054][T28802] x86/PAT: syz-executor.5:28802 map pfn RAM range req write-combining for [mem 0x3a020000-0x3a020fff], got write-back 18:43:51 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fsa', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x400, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x100, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@remote={[], 0x0}, 0xc}) lseek(r1, 0x0, 0x4) 18:43:51 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) accept(r3, 0x0, 0x0) 18:43:51 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fsb', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1376.830252][T28828] input: syz1 as /devices/virtual/input/input1281 18:43:51 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) preadv(r6, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f0000000200)=""/250, 0xfa}, {&(0x7f0000000300)=""/237, 0xed}], 0x3, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000900)=ANY=[@ANYBLOB="240000001800310300000000707c0bdc06ae89cfb043248385b5424a0000000002000000000000080000000008000400672dc013a1737deea5030050c23a6e3fb984e2ad188c7d338ca26ff21d38596aeafcc228fd5f685b7e2de512d300e986fca07c697c0ef27f5eecef5ee48e2b4baf684387e6b1de593aca6b41b18c5ca6442d480f9c8712013629ae6b106d50539bfaa12b049bc613f4d93d7a24b8ec9cac7811de08efa5a40de338503c632e3973b7023b974c584ff60da95198c9d985c748af91017b369eef17eaca7ca9999f2c2a0840b1848ef325ba4542b41000"/235, @ANYRES32=r7], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)={'team0\x00', r7}) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10003, 0x0) bind$rxrpc(r9, &(0x7f00000000c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x11b4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x28}}, 0x5}}, 0x24) socket$rds(0x15, 0x5, 0x0) sendto$inet(r8, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) getsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000880)={@empty, @remote}, &(0x7f00000008c0)=0xc) sendto$inet(r8, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:43:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='\x00\x00\x00\x00\x00\t\x00', 0xd42c0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x4) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x0) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000000), &(0x7f00000000c0)=""/222, 0xde}) [ 1377.024002][T28828] input: syz1 as /devices/virtual/input/input1282 [ 1377.097431][T28843] x86/PAT: syz-executor.5:28843 map pfn RAM range req write-combining for [mem 0x3a050000-0x3a050fff], got write-back 18:43:51 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fsc', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1377.186335][T28846] x86/PAT: syz-executor.5:28846 map pfn RAM range req write-combining for [mem 0x3a060000-0x3a060fff], got write-back 18:43:52 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x80010, r2, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0xfffffffffffffea5, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, r3, 0x0, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r11 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_hci(r11, 0x0, 0x3, &(0x7f0000000100)=""/208, &(0x7f0000000200)=0xd0) r12 = dup(r10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r12, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r12, 0xc028564e, &(0x7f0000000000)={0x2, 0x1, [0x7, 0x81, 0xff, 0x62a, 0xfffff001, 0x5, 0x400, 0x20]}) accept(r8, 0x0, 0x0) [ 1377.448276][T28856] x86/PAT: syz-executor.2:28856 map pfn RAM range req write-combining for [mem 0x3a080000-0x3a080fff], got write-back 18:43:52 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fsd', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:52 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) getsockopt$inet6_dccp_buf(r2, 0x21, 0xc, &(0x7f0000000100)=""/95, &(0x7f0000000000)=0x5f) accept(r4, 0x0, 0x0) 18:43:52 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000340)=0x20000000) r6 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000100)={0xb, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0xfb, 0x3, 0xf43, 0x0, 0x9, 0x7, "60070afa91fcb1b6b7859bf9c95e9001d7c418f78b843824ba9cbfb543d254cf869302cb96a96e7e11c0e25b5537c2447d216db782076b41bb713e2c2b6022e27bffa9eadb189d6ae0867a72d5dd8971287883519513a3a47bed0ed9d7c4b079757a4738a18b60091a5c6c668860e23f04d2ab909c09a06456a848e8ff3e58e123ff61fab8e83861f6a579d337bd36335dd28f81071459267d7ba1b14d74fb10f7bbe5a76c1bd3f532879b83726d65d461f01a45039d55574670d049b4448dd2410a6cd74dcb2723f1aa4162af0ceb87a30342b7c2dc678f3c4847b0bcc79816fdb20118fd17471d49a277ff99d61b61081942c9b748c10a6a5ccc"}, 0x213) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) accept(r8, 0x0, 0x0) 18:43:52 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fse', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:52 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x32800}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) ioctl$KDSKBMODE(r6, 0x4b45, &(0x7f0000000000)=0x6636) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1378.067554][T28881] input: syz1 as /devices/virtual/input/input1283 [ 1378.098385][T28881] x86/PAT: syz-executor.2:28881 map pfn RAM range req write-combining for [mem 0x3a0a0000-0x3a0a0fff], got write-back [ 1378.277086][T28894] x86/PAT: syz-executor.2:28894 map pfn RAM range req write-combining for [mem 0x3a0b0000-0x3a0b0fff], got write-back 18:43:53 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fsf', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1378.383290][T28892] input: syz1 as /devices/virtual/input/input1284 18:43:53 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1f, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x181, 0x0, 0x4c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) accept(r4, 0x0, 0x0) 18:43:53 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x28, &(0x7f00000000c0)}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x4) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000140)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f0000000000)='security.SMACK64IPOUT\x00', &(0x7f0000000040)='/dev/uinput\x00', 0xc, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) readahead(r3, 0x5, 0x9) r4 = timerfd_create(0x0, 0x0) fstat(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r5, r5, 0x0) setregid(r5, 0xffffffffffffffff) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x9) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x15, &(0x7f0000001600)=ANY=[@ANYBLOB="850000002200000007000000000000009500000000000000c256f8eef4a74d2e3914e3504ee11b525f202c33178114ec6a58e99e37ec61d16ecb6731f0ecd6afb660d265cf02ffdb2d942f36242c7fede3e2d1ea4c74207b546b2e6268bd4373cf3066d525719ff1468100ac561d9a62879597f681760601ac9940c6ac368eb5d98b686d49006afe2111fa694278b371d2a9e7133a6a7b782f16a53d0fe942a0359f0d93a6d3e42b"], &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={r8}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={r8}, 0xc) fsetxattr$security_smack_entry(r6, &(0x7f0000000180)='security.SMACK64EXEC\x00', &(0x7f00000001c0)='/dev/uinput\x00', 0xc, 0x2) 18:43:53 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) recvfrom$ax25(r3, &(0x7f0000000100)=""/236, 0xec, 0x200, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) accept(r5, 0x0, 0x0) 18:43:53 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fsg', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1378.776550][T28912] x86/PAT: syz-executor.5:28912 map pfn RAM range req write-combining for [mem 0x3e7b0000-0x3e7b0fff], got write-back [ 1378.882080][T28912] input: syz1 as /devices/virtual/input/input1285 [ 1378.968921][T28912] input: syz1 as /devices/virtual/input/input1286 18:43:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1379.118786][T28915] input: syz1 as /devices/virtual/input/input1287 18:43:53 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) accept(r4, 0x0, 0x0) 18:43:53 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fsh', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x1a1540, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getpeername$netrom(r1, &(0x7f0000000080)={{0x3, @default}, [@bcast, @null, @null, @netrom, @default, @remote, @remote, @netrom]}, &(0x7f0000000100)=0x48) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r2, 0x0, 0x4) 18:43:54 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) r4 = accept$alg(r3, 0x0, 0x0) accept(r4, 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 18:43:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x4) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) connect(r2, &(0x7f00000000c0)=@llc={0x1a, 0x311, 0x5f, 0x7, 0xc0, 0x7f, @random="0ff38f0e51f7"}, 0x80) 18:43:54 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:54 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x94, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) accept(r4, 0x0, 0x0) 18:43:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6a000000000, 0x1, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x4) [ 1380.024783][T28966] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1380.103960][T28966] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1380.130222][T28966] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:43:54 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) accept(r4, 0x0, 0x0) [ 1380.182334][T28966] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:43:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x388, 0x2b, 0x0, r6}) lseek(r7, 0x0, 0x4) [ 1380.302634][T28966] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1380.313475][T28980] x86/PAT: syz-executor.5:28980 map pfn RAM range req write-combining for [mem 0x3a0f0000-0x3a0f0fff], got write-back [ 1380.355158][T28966] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1380.391745][T28966] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:43:55 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x101000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f00000000c0)={0x800, 0x10, [0x200, 0xfbe6, 0x0, 0x4]}) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1380.392303][T28980] x86/PAT: syz-executor.5:28980 map pfn RAM range req write-combining for [mem 0x3a100000-0x3a100fff], got write-back [ 1380.431694][T28966] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1380.511218][T28987] x86/PAT: syz-executor.5:28987 map pfn RAM range req write-combining for [mem 0x3a110000-0x3a110fff], got write-back [ 1380.573342][T28987] x86/PAT: syz-executor.5:28987 map pfn RAM range req write-combining for [mem 0x3a120000-0x3a120fff], got write-back 18:43:55 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x18401, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x5) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0xffff, 0x8, 0x3f, 0x80000000}, {0x8f7, 0xfd, 0x0, 0x7fff}, {0x1, 0x1, 0x8, 0x1f}]}, 0x10) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$alg(0x26, 0x5, 0x0) r8 = accept$alg(r7, 0x0, 0x0) accept(r8, 0x0, 0x0) [ 1380.795854][T28995] x86/PAT: syz-executor.2:28995 map pfn RAM range req write-combining for [mem 0x3a130000-0x3a130fff], got write-back [ 1380.805699][T28992] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1380.835262][T28992] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:43:55 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) recvmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f00000001c0)=0x1, &(0x7f0000000200)=0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bcsh0\x00'}) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) fadvise64(r6, 0x0, 0x1, 0x0) lseek(r1, 0x0, 0x4) [ 1380.871958][T28992] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1380.911009][T28992] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1381.043949][T28992] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1381.063190][T28992] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1381.106413][T28992] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1381.145671][T28992] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:43:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r7, 0x0) ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) setreuid(0x0, r4) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, r8) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r10 = accept$alg(r9, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f00000001c0)={0x0, 0x0, 0x2080}) accept(r10, 0x0, 0x0) 18:43:55 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0xb30384703eb7ce8f) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa928, 0xb, 0x0, r4}) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f00000000c0)) lseek(r5, 0x0, 0x4) 18:43:56 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1381.285588][T29011] x86/PAT: syz-executor.2:29011 map pfn RAM range req write-combining for [mem 0x3a170000-0x3a170fff], got write-back 18:43:56 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x9, 0x4080) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) alarm(0x7) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r7, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1381.381178][T29016] x86/PAT: syz-executor.5:29016 map pfn RAM range req write-combining for [mem 0x3a180000-0x3a180fff], got write-back [ 1381.444276][T29016] x86/PAT: syz-executor.5:29016 map pfn RAM range req write-combining for [mem 0x3a1a0000-0x3a1a0fff], got write-back [ 1381.476908][T29019] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1381.489433][T29011] x86/PAT: syz-executor.2:29011 map pfn RAM range req write-combining for [mem 0x3a1b0000-0x3a1b0fff], got write-back [ 1381.522605][T29019] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1381.605403][T29019] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1381.643124][T29019] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:43:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x101000, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x45, &(0x7f0000000100)=""/226, &(0x7f0000000200)=0xe2) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = dup2(0xffffffffffffffff, r1) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='syz1\x00') ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f00000003c0)=0x1000) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x1d5f) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) r5 = openat$cgroup_ro(r4, &(0x7f0000000880)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f00000008c0)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r6, 0x0, 0x4) clock_gettime(0x5, &(0x7f0000000900)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]) r7 = syz_open_dev$adsp(&(0x7f0000000940)='/dev/adsp#\x00', 0x4, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f0000000980)=0x1) [ 1381.767583][T29019] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1381.811413][T29019] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:43:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f00000001c0)=0x6, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000000)=0x20, &(0x7f0000000100)=0x1) r6 = accept$alg(r4, 0x0, 0x0) accept(r6, 0x0, 0x0) [ 1381.852746][T29019] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1381.896964][T29019] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1381.915970][T29034] input: syz1 as /devices/virtual/input/input1289 18:43:56 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f00000001c0)=""/113, 0x71) keyctl$describe(0x6, r1, &(0x7f00000000c0)=""/104, 0x68) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r2, 0x0, 0x4) [ 1382.216152][T29045] encrypted_key: insufficient parameters specified [ 1382.234350][T29043] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1382.276488][T29043] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1382.277134][T29045] encrypted_key: insufficient parameters specified 18:43:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x402c0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1382.327612][T29043] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1382.367365][T29043] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:43:57 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x10, r6, 0x8000000) r7 = accept$alg(r3, 0x0, 0x0) accept(r7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x41) [ 1382.487586][T29043] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1382.509133][T29058] x86/PAT: syz-executor.2:29058 map pfn RAM range req write-combining for [mem 0x3a200000-0x3a200fff], got write-back [ 1382.566130][T29043] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1382.625309][T29043] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1382.634526][T29043] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:43:57 executing program 5: r0 = epoll_create1(0x0) r1 = getpgrp(0xffffffffffffffff) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, r0, &(0x7f0000000000)) r3 = syz_open_procfs(r2, &(0x7f0000000880)='clear_refs\x00') ioctl$TIOCNOTTY(r3, 0x5422) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x1e4ac1, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r9, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) r10 = dup2(0xffffffffffffffff, r9) ioctl$VIDIOC_G_SLICED_VBI_CAP(r10, 0xc0745645, &(0x7f0000000640)={0x9, [0x9, 0x9, 0x4, 0x6, 0xe686, 0x9, 0xfff, 0x1, 0xfffe, 0x0, 0x3851, 0x3, 0x6, 0x0, 0xec0, 0x0, 0xba6, 0x7fff, 0x8, 0x400, 0xe00, 0x7, 0xfff7, 0x5, 0xfec6, 0x200, 0x7, 0x6, 0x3, 0x400, 0x7, 0x1000, 0x7b0, 0x200, 0x0, 0x5, 0x8, 0x5, 0x2, 0x4, 0x80, 0x9, 0x7ff, 0x8, 0x2229, 0x9, 0x9, 0x1f], 0x5}) r11 = dup(r8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r11, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r12 = dup(r6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r12, 0x0) setsockopt$inet6_group_source_req(r12, 0x29, 0x2f, &(0x7f0000000140)={0x6, {{0xa, 0x4e21, 0x200, @empty, 0x3}}, {{0xa, 0x4e23, 0x0, @empty, 0x7}}}, 0x108) r13 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r13, &(0x7f00000001c0)=""/113, 0x71) connect(r12, &(0x7f00000005c0)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x4}}, 0x80) r14 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r13) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000300)={r14, 0xeb, 0xc4}, &(0x7f0000000340)={'enc=', 'raw', ' hash=', {'wp384-generic\x00'}}, &(0x7f00000003c0)="ccbb85f7d85ec065d8979d9997d059f8ccddfb174fed2f8b1cd4c557c383d4fb5ba53fd00bff814a758acacc6872c30aab2b52643b234bd12064a6c5a34cbb8e0912fcf635f93a9fcb3e3e3d4fe21268fcbe9877a0ab2844f701adcb008d1e38af99de559efe658a5f5d907d1dcdf5adb7dc4902e7a91012d0333fe63c781c533440fb2326b7fdd79b26c4114ac1ddddc539eeef32b5f10738e4d3ca277b8a92e1961614858275822dc1ce90a6acf4d96305784a196a6ddfc68a6f62603be7f96eabc045b0c4869ade942cc0115616f0f8ac539cf9f6c8859e2d4ca0ba0f5800075fc31b7d4976087db70f", &(0x7f00000004c0)=""/196) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, r12}) fsetxattr$security_smack_entry(r4, &(0x7f0000000000)='security.SMACK64MMAP\x00', &(0x7f00000000c0)='%\x00', 0x2, 0x5a424e330826def8) lseek(r15, 0x0, 0x4) [ 1382.689531][T29058] x86/PAT: syz-executor.2:29058 map pfn RAM range req write-combining for [mem 0x3a210000-0x3a210fff], got write-back [ 1382.799531][T29066] input: syz1 as /devices/virtual/input/input1291 18:43:57 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1382.840861][T29069] x86/PAT: syz-executor.5:29069 map pfn RAM range req write-combining for [mem 0x3a230000-0x3a230fff], got write-back [ 1382.910762][T29066] x86/PAT: syz-executor.5:29066 map pfn RAM range req write-combining for [mem 0x3a220000-0x3a220fff], got write-back 18:43:57 executing program 2: open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000100)) read$FUSE(0xffffffffffffffff, &(0x7f0000002540), 0x1000) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000280)={0x90, 0x0, 0x2, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000002c0f}}}, 0x90) [ 1382.952651][T29066] encrypted_key: insufficient parameters specified [ 1382.999976][T29071] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1383.022609][T29073] input: syz1 as /devices/virtual/input/input1292 [ 1383.075619][T29071] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1383.101157][T29069] x86/PAT: syz-executor.5:29069 map pfn RAM range req write-combining for [mem 0x3a250000-0x3a250fff], got write-back [ 1383.127847][T29071] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1383.188438][T29066] x86/PAT: syz-executor.5:29066 map pfn RAM range req write-combining for [mem 0x3a240000-0x3a240fff], got write-back [ 1383.216444][T29071] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1383.250780][T29073] encrypted_key: insufficient parameters specified 18:43:58 executing program 2: [ 1383.361560][T29071] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:43:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f00000000c0)) lseek(r1, 0x0, 0x4) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff0001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x66}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10008000}, 0x40400a4) [ 1383.414683][T29071] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:43:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x7c97e2f1050e1141, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f00000001c0)=0x7ff) r4 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) connect$caif(0xffffffffffffffff, &(0x7f0000000200)=@dbg={0x25, 0xf8, 0x9f}, 0x18) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000000c0)=0x3, 0x4) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r8, 0x0) ioctl$KVM_GET_PIT2(r8, 0x8070ae9f, &(0x7f0000000140)) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r6, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:43:58 executing program 2: [ 1383.477103][T29071] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1383.550268][T29071] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:43:58 executing program 2: 18:43:58 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x86480, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1000}) r3 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x0) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f0000000100)={0x0, 0x101, 0x1ff, [], &(0x7f00000000c0)=0x2}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa9a5, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r4, 0x0, 0x4) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7ff, 0x101000) [ 1383.828749][T29110] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:43:58 executing program 2: [ 1383.870931][T29110] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:43:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x501302, 0x0) recvfrom$llc(r2, &(0x7f0000000240)=""/116, 0x74, 0x0, 0x0, 0x2ce) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x18002, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x200, 0x778, 0xffffcd31, 0x1, 0x40}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={r3, 0xfffff000}, 0x8) [ 1383.916389][T29110] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1383.945385][T29110] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:43:58 executing program 2: [ 1384.105615][T29110] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1384.142753][T29110] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:43:58 executing program 2: [ 1384.185169][T29110] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1384.197614][T29110] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:43:59 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs ', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:59 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x40000, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa921, 0x3b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x4) 18:43:59 executing program 2: 18:43:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x3, 0xffffffffffffffff}) lseek(r1, 0x0, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000000)={0x80000001, 0x9, 0x3, @remote, 'veth1_to_bond\x00'}) 18:43:59 executing program 2: 18:43:59 executing program 2: 18:43:59 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:43:59 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x2f, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000c80)) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/capi/capi20ncci\x00', 0x200, 0x0) semget(0x1, 0x0, 0x0) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r6, r5, 0x0, 0x10a000d10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000c00)={{0x3a, @multicast2, 0x4e22, 0x3, 'none\x00', 0x8, 0xffff, 0x2c}, {@broadcast, 0x4e21, 0x0, 0x1f, 0x0, 0x1}}, 0x44) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x8) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$SG_SET_TIMEOUT(r8, 0x2201, &(0x7f00000000c0)=0x4) sendto$inet(r7, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) write$binfmt_aout(r7, &(0x7f0000000d80)=ANY=[@ANYBLOB="cc003f00a60000009c03000007000000880000007600000000000000000000006a2967c722a0cc9e6c8999f165c00db911aeaa8c35f783fda540a450e387727b433a6bec2a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ed0693000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000729bc60300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c65a54ff00"/2374], 0x945) sendto$inet(r7, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r12 = dup(r11) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r12, 0x0) 18:43:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x100, 0x14}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0x9) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000140)={'vcan0\x00', {0x2, 0x4e24, @broadcast}}) lseek(r2, 0x0, 0x4) 18:43:59 executing program 2: [ 1384.979452][T29163] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1385.005164][T29163] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:43:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) lseek(r1, 0x0, 0x2) [ 1385.061627][T29163] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:43:59 executing program 2: [ 1385.134003][T29163] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:00 executing program 2: 18:44:00 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:00 executing program 2: [ 1385.542417][T29182] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1385.565381][T29182] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:00 executing program 2: [ 1385.591824][T29182] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1385.612051][T29182] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:00 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x6, 0x4, 0x1, r6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r7, 0x0, 0x4) [ 1385.718711][T29191] input: syz1 as /devices/virtual/input/input1293 [ 1385.785439][T29195] input: syz1 as /devices/virtual/input/input1294 18:44:00 executing program 2: [ 1385.864444][T29191] x86/PAT: syz-executor.5:29191 map pfn RAM range req write-combining for [mem 0x3a350000-0x3a350fff], got write-back 18:44:00 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x10', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:00 executing program 2: [ 1386.057261][T29191] input: syz1 as /devices/virtual/input/input1295 [ 1386.105259][T29195] input: syz1 as /devices/virtual/input/input1296 18:44:00 executing program 2: 18:44:00 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff0fdad1cb3507000080"], &(0x7f0000000180)=0xe) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x8, 0x4, 0x1, 0xfff, r3}, &(0x7f0000000200)=0x10) socket$isdn(0x22, 0x3, 0x4) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) r5 = dup2(0xffffffffffffffff, r4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={r8}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000240)={r8, 0x7, 0x1, [0x8]}, 0xa) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0x7, 0x2, 0x50, 0x1, 0xfffffffe, 0x3}) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r9, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r9) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r10, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r10, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f00000000c0)) 18:44:00 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x3) 18:44:01 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:01 executing program 2: [ 1386.471963][T29226] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1386.522592][T29226] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1386.550740][T29226] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r4 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0xa7e7c3184b3aace2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r5}}, 0x18) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x30c02, 0x0) syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x2, 0x800) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000300)=0x6) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000340)=0x4, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000100)={0x3, {{0xa, 0x4e23, 0x0, @mcast1, 0x1000}}}, 0x88) lseek(r1, 0x0, 0x4) r7 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) preadv(r7, &(0x7f00000000c0), 0x0, 0x0) [ 1386.592900][T29226] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:01 executing program 2: [ 1386.695289][T29226] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1386.709325][T29235] input: syz1 as /devices/virtual/input/input1297 [ 1386.732501][T29226] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1386.754834][T29235] x86/PAT: syz-executor.5:29235 map pfn RAM range req write-combining for [mem 0x3a390000-0x3a390fff], got write-back [ 1386.826700][T29226] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1386.855180][T29226] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1386.868296][T29241] input: syz1 as /devices/virtual/input/input1298 18:44:01 executing program 2: 18:44:01 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs&', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/\b\x00', 0x105000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/13, 0xd) lseek(r1, 0x0, 0x4) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x0) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000280)=""/4096) r5 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x8000000000006, 0x202001) bind$x25(r5, &(0x7f0000000100)={0x9, @remote={[], 0x1}}, 0x12) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) 18:44:01 executing program 2: [ 1387.170896][T29252] x86/PAT: syz-executor.5:29252 map pfn RAM range req write-combining for [mem 0x3a3d0000-0x3a3d0fff], got write-back 18:44:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x1, 0x0, 0x1, 0x8090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1387.261079][T29252] x86/PAT: syz-executor.5:29252 map pfn RAM range req write-combining for [mem 0x3a3e0000-0x3a3e0fff], got write-back 18:44:02 executing program 2: 18:44:02 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) 18:44:02 executing program 2: 18:44:02 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs&', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000000)={0x0, 0x40000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) lseek(r1, 0x0, 0x2) 18:44:02 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) socket(0x8, 0x4, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x12000, 0x0) lseek(r1, 0x0, 0x4) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x3, 0x1, 0x1, 0x9}) 18:44:02 executing program 2: [ 1387.719773][T29275] x86/PAT: syz-executor.3:29275 map pfn RAM range req write-combining for [mem 0x39c10000-0x39c10fff], got write-back 18:44:02 executing program 2: 18:44:02 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0xffffffffffffffdb) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_bt_hci(r5, 0x400448df, &(0x7f00000000c0)="be6bd7fad543389e7e50fe2b4b6189aa44074bc04c26121b0983c313471a8b984964a66626ac5ed75870bc40c43e26812004027b10db0bdd46e6c61dc36cc72aec741b7f3350fb6aceb218d1055141a5c8c710ddab488416f44b7c8eb201a2d7c4") lseek(r1, 0x0, 0x4) 18:44:02 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs$', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:02 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x22, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x8000) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000100), 0x4) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$PPPIOCGDEBUG(r7, 0x80047441, &(0x7f00000001c0)) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000140)={0xffffffff, 0x0, 0x2016, 0x5, 0x8, 0x1, 0xff}) ioctl$sock_bt_hci(r2, 0x400448e1, &(0x7f0000000000)="35f81c7b8c3abd4eadcdbc5111cd2360d3373fb59e98ce8850ba07d87a1e2203871694fb8226d35a470f6b699b0e9e3a13df217161ec1cffeb59") 18:44:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='map_files\x00') ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000140)="f74b70e531e908a6cc7fbdc7c9fa4c25e7e2dea5ac0692341df31410786e82217537b85627a1f970ff9ffb6fa84265e8d1511af445f82ecd2c9abd40c577b8b29e8f837044bb8cabfc1416c9c97e95e5181508043fdb73839a629a07023c03d3fa72ef4cd349132189559dab60010adefbe6f1cfb6edbfac465e7166e7") sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r7, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r7) 18:44:02 executing program 2: [ 1388.266206][T29308] x86/PAT: syz-executor.3:29308 map pfn RAM range req write-combining for [mem 0x39c90000-0x39c90fff], got write-back 18:44:03 executing program 2: 18:44:03 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) recvmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) getsockopt(r2, 0x0, 0x0, &(0x7f00000000c0)=""/156, &(0x7f0000000000)=0x9c) lseek(r1, 0x0, 0x4) 18:44:03 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs%', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:03 executing program 2: 18:44:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x2b0a03, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={r5, 0x55f5, 0x38, 0x6, 0x1}, &(0x7f0000000100)=0x18) lseek(r1, 0x0, 0x2) 18:44:03 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_access\x00') lseek(r1, 0x0, 0x4) 18:44:03 executing program 2: 18:44:03 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x04', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1388.930775][T29339] input: syz1 as /devices/virtual/input/input1299 [ 1389.059266][T29345] input: syz1 as /devices/virtual/input/input1300 18:44:03 executing program 2: 18:44:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sched_setattr(0x0, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() write$P9_RLCREATE(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$P9_ROPEN(r0, &(0x7f0000000040)={0x18}, 0x18) sendto$inet(r0, &(0x7f0000000480)="8b", 0x1, 0xfffffffffffffffd, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/148, 0xff1e}], 0x1}}, {{0x0, 0xffffffffffffffcd, 0x0}}], 0x40001de, 0x0, 0x0) 18:44:04 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x740b7fb0f45abed6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x53a8cb88fc6c4a8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:44:04 executing program 2: 18:44:04 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x1fb) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x102, 0x8000003}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, &(0x7f0000000240)=0x202, 0x4000000000dc) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="050cfd000000ffdbdf2503"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000000c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xd0028080}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x24044885) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) dup2(r9, r10) r11 = dup(r2) r12 = open(&(0x7f0000000400)='./file0\x00', 0x200000, 0x1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1032}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="10002dbd7000ffdbdf25020000002400070008000100", @ANYRES32=r7, @ANYBLOB="080088052b0fcecc00240979ad61145f14392b8ac4e74387b6e12f9bc27a85ef460a9fe818c8a18bb8b71a79b4c51479447d64210d86fb415ddd8da0ff53ce9aca44f2a3ebe21c7584be891c117ffebf722e5d7c65196e0d125471b5cc7bbf00"/108, @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="0c000200000000000000000008000100000000000c00080006000000000000000c0004000000000000000000"], 0xb}}, 0x4000000) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000426bd7000ffdbdf25050000000c000300010000020000452e0800000c00030004000000595c7ec798f3000000000800010000000000"], 0x40}, 0x1, 0x0, 0x0, 0x68bfa0df19c7b291}, 0x40000) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) write$evdev(r12, &(0x7f0000000340)=[{{0x0, 0x2710}, 0x1, 0x2b0, 0x10001}, {{0x0, 0x2710}, 0x15, 0x7, 0x7f}, {{}, 0xe, 0x401, 0xfffffffa}, {{r13, r14/1000+10000}, 0x11, 0x7f, 0x401}, {{0x77359400}, 0x4, 0x100, 0x3}, {{}, 0x15, 0x5, 0xf4}, {{0x0, 0x2710}, 0x1, 0x9, 0xdf}], 0xa8) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00032abd7000df25010000000c0004ffff00000000000000a9e4389dba512e2a4887d60aa7e2719c0fb9d1b27e0c4d8897264c720000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r16 = socket(0x11, 0x800000003, 0x0) bind(r16, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r16, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$IP_VS_SO_SET_TIMEOUT(r16, 0x0, 0x48a, &(0x7f00000002c0)={0x25, 0xe6c, 0x9}, 0xc) lseek(r15, 0x0, 0x2) 18:44:04 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:04 executing program 2: [ 1389.699733][T29373] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1389.737968][T29373] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1389.761911][T29373] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1389.792222][T29373] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:04 executing program 2: 18:44:04 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x30051, r2, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) 18:44:04 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:04 executing program 2: [ 1390.106682][T29386] x86/PAT: syz-executor.3:29386 map pfn RAM range req write-combining for [mem 0x39aa0000-0x39aa0fff], got write-back 18:44:04 executing program 2: 18:44:04 executing program 5: [ 1390.255514][T29393] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1390.267108][T29393] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:05 executing program 3: [ 1390.346484][T29393] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1390.379301][T29393] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:05 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:44:05 executing program 5: 18:44:05 executing program 2: [ 1390.536959][T29393] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1390.581770][T29393] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:05 executing program 2: [ 1390.638949][T29393] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:05 executing program 3: 18:44:05 executing program 5: [ 1390.716651][T29393] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:05 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:05 executing program 3: 18:44:05 executing program 2: 18:44:05 executing program 5: 18:44:05 executing program 3: [ 1391.153732][T29429] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:44:05 executing program 5: [ 1391.206353][T29429] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1391.248977][T29429] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1391.304158][T29429] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1391.427005][T29429] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1391.459830][T29429] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:06 executing program 5: 18:44:06 executing program 3: 18:44:06 executing program 2: [ 1391.500254][T29429] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f00000001c0), &(0x7f0000000200)=0x14) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) connect$rds(r4, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000001280)={@ethernet, {&(0x7f0000000240)=""/4096, 0x1000}, &(0x7f0000001240), 0x20}, 0xa0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000001340)=@buf) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:44:06 executing program 2: [ 1391.576041][T29429] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:06 executing program 3: 18:44:06 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:06 executing program 5: 18:44:06 executing program 2: 18:44:06 executing program 3: socket(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) prctl$PR_GET_NAME(0x10, &(0x7f0000000200)=""/135) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) accept4$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000001c0)=0x10, 0x40000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYPTR64], 0x4, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) rmdir(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) statfs(0x0, &(0x7f0000000340)) 18:44:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_sctp(0x2, 0x400000000001, 0x84) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xcd) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0xfc, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) [ 1391.930685][T29461] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:44:06 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='/\x00~WMz\x0f0\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xe8\xd3\x83dx-c\xb6a(T\xb2\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e\t\x00\x00\x00\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\n\xd8\x1e\xd8\xda2NDcq\xef\x1eu\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xeb\x8e\x14\x03w\xaao\xb3\x17\x00\xf18\xdcM~\b\xd5|(*g\xdeZu\xc5G\x1f\x81\x00\x00\x00\x00\x00\x00\x00\x9bS\x98\x17\xdb\xa7\x7fK\x93\xcf\xe7-\x19\\I\x1f\xb6\'d\xfce\x92\xe0m\xd0\xa7\xf6:\xbb\xd4\xc6\xe3/_\xa1\x9fnM\xc0t\xd8$\xfc|i\x80@\xc7\xe8\xb2q6\xfa\xd5~b\x89B\xb4i\xeeGh\\\x94\"\xbf\xc1\x99*Lv\xa4\xa3\x91&\xd2\x14\x02\xb9g-*\xa0\xf8\x9b\x04,\xa8\x98%-\x1e%\xf8L\x01\xbe\x87\xd4\x8c\x9d\x9c\r9\xfb#\x1d\xd7\xc0\xe6E\x81\x16c\xeaN\xb8\xfb\x06\xd2\x01\a\xc7\x9e\xb1\x85Xu\xc9v\xe58\xe6\xe3\xf3\x16\xc4\x88\x03%M3\xec=c\x84\xeb\xc2\xb0\x87\xfdb\xa9\xa4\xe6\xd8\xe5\xeaq/\x1e\xbcW\xec+', 0x0, 0x0) [ 1392.045196][T29461] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1392.107393][T29461] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1392.212840][T29461] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1392.234707][T29469] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 18:44:07 executing program 2: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0) fchdir(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46800) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000001c0)=""/15) write$FUSE_INIT(r3, &(0x7f0000000000)={0x50}, 0x50) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f00000003c0), 0xc, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB='*\x00\x00@\x00', @ANYRES32=0x0], 0x2}}, 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000380)={0x3ff, 0x0, 0x80000007, 0xfffffffffffff1a3, 0x0, "c954fa00951c0040838cea87aa78bfe09cdd0d", 0x3, 0xea4}) [ 1392.355799][T29461] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1392.390670][T29461] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1392.450579][T29461] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1392.485101][T29461] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:07 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x04', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:07 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:44:07 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x9, 0x4080) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) alarm(0x7) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r7, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:44:07 executing program 0: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x64) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x7ff}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') r6 = syz_open_dev$radio(&(0x7f0000000480)='/dev/radio#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000004c0)={0x0, 0x4c2a, 0x1f, 0xfffffc01, 0x4, 0x4}, &(0x7f0000000500)=0x14) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000540)={r7, 0x7}, 0x8) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10810}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x38, r5, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x800}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="70010000", @ANYRES16=r5, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x8804}, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r10, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x12, r10, 0x10000000) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x33d) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) r11 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r11, &(0x7f00000001c0)=""/113, 0x71) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r11, &(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000140)=@secondary='builtin_and_secondary_trusted\x00') inotify_init() 18:44:07 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x04', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1393.021466][T29505] encrypted_key: insufficient parameters specified 18:44:07 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r7, 0x0) ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) setreuid(0x0, r4) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, r8) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r10 = accept$alg(r9, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f00000001c0)={0x0, 0x0, 0x2080}) accept(r10, 0x0, 0x0) 18:44:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x100, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r8, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x440, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={r10, 0x180000, r2}) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000080), 0x4) r11 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r13 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x40000) r14 = socket$caif_seqpacket(0x25, 0x5, 0x0) recvmmsg(r14, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x89e2, &(0x7f0000000280)={r14}) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x3ff, 0x40}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x3, 0xfffff700, 0xc}, 0x10) ioctl$NBD_SET_FLAGS(r13, 0xab0a, 0x3) fcntl$setstatus(r12, 0x4, 0x2000) r15 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r15, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], [0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r15, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r15, 0x5501, 0x0) fremovexattr(r15, &(0x7f0000000240)=@known='security.apparmor\x00') 18:44:08 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1393.382475][T29522] x86/PAT: syz-executor.4:29522 map pfn RAM range req write-combining for [mem 0x5b480000-0x5b480fff], got write-back [ 1393.414053][T29522] x86/PAT: syz-executor.4:29522 map pfn RAM range req write-combining for [mem 0x39a60000-0x39a60fff], got write-back [ 1393.502275][T29524] x86/PAT: syz-executor.2:29524 map pfn RAM range req write-combining for [mem 0x39a70000-0x39a70fff], got write-back [ 1393.557967][T29525] input: syz1 as /devices/virtual/input/input1301 [ 1393.584157][T29527] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1393.612751][T29527] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1393.651932][T29527] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1393.677660][T29527] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:08 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x9, 0x4080) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) alarm(0x7) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r7, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:44:08 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_OIF={0x8, 0x4, r10}]}, 0x24}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x11, 0x800000003, 0x0) bind(r13, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r13, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_OIF={0x8, 0x4, r14}]}, 0x24}}, 0x0) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1182100}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x188, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0x16c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}]}}]}, 0x188}, 0x1, 0x0, 0x0, 0x22004000}, 0x80) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1393.794589][T29527] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1393.825169][T29527] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1393.861765][T29527] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1393.900517][T29527] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:08 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4100, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000380)={0xa, 0x4, 0xff, 0x2}, 0xa) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="98010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x40018) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) [ 1393.922021][T29522] x86/PAT: syz-executor.4:29522 map pfn RAM range req write-combining for [mem 0x39d20000-0x39d20fff], got write-back 18:44:08 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x38, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1af272c7339d766a}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x80, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:44:08 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x04', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:08 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9f18}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90240}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="40012000", @ANYRES16=r5, @ANYBLOB="000129bd7000fcdbdf2503000000080002000a000000080001004e200000140007000000000000000000000000000000000004000500080003002e000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004840}, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x400, 0x0) sendto$inet(r6, &(0x7f0000000280)="e0edde8b9ddc6563c4c9fe9ee181732d79f0cb61567d1e2d563c93df7b9cec90c93ab8d830e1237e3346bd8b85e2947bb5ab145b4c89b5b08d342c2d0fa558a63900e979c8a071e954851cdf52798968071c46ee83a8d7aeb7e35bbbe1bc8028c8de155141e1", 0x66, 0x20000000, &(0x7f0000000300)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:44:08 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x2) 18:44:08 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x9, 0x4080) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) alarm(0x7) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r7, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:44:09 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x04', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:09 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x2) 18:44:09 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x04', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:09 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x2) 18:44:09 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) shmctl$IPC_RMID(0x0, 0x0) sync() socket(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:44:09 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = eventfd2(0x7fff, 0x800) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00', {0x0, 0x0, 0xffff}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) poll(&(0x7f0000000040)=[{r3, 0x5020}, {r0, 0xe400}, {r4, 0x20}, {r5, 0x4000}], 0x4, 0x3) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r6, 0x4, 0x2000) 18:44:09 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1395.057547][T29587] input: syz1 as /devices/virtual/input/input1302 [ 1395.199224][T29587] input: syz1 as /devices/virtual/input/input1303 18:44:10 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x04', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:10 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) 18:44:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x210000, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) r7 = socket(0x11, 0x6, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x1fa, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 'lblc\x00', 0x2, 0x200, 0x60}, 0x2c) sendto$inet(r6, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r6, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) ptrace(0x2111, 0xffffffffffffffff) 18:44:10 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1395.623848][T29600] input: syz1 as /devices/virtual/input/input1305 [ 1395.658354][T29587] input: syz1 as /devices/virtual/input/input1304 [ 1397.416493][ T9610] device bridge_slave_1 left promiscuous mode [ 1397.422805][ T9610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.478598][ T9610] device bridge_slave_0 left promiscuous mode [ 1397.485840][ T9610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.765743][ T9610] device hsr_slave_0 left promiscuous mode [ 1400.805532][ T9610] device hsr_slave_1 left promiscuous mode [ 1400.873073][ T9610] team0 (unregistering): Port device team_slave_1 removed [ 1400.891863][ T9610] team0 (unregistering): Port device team_slave_0 removed [ 1400.911694][ T9610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1400.982071][ T9610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1401.104456][ T9610] bond0 (unregistering): Released all slaves [ 1401.220427][T29672] IPVS: ftp: loaded support on port[0] = 21 [ 1401.398270][T29672] chnl_net:caif_netlink_parms(): no params data found [ 1401.463221][T29672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.479672][T29672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.498240][T29672] device bridge_slave_0 entered promiscuous mode [ 1401.508544][T29672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.516361][T29672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.524635][T29672] device bridge_slave_1 entered promiscuous mode [ 1401.560365][T29672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1401.602933][T29672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.648592][T29672] team0: Port device team_slave_0 added [ 1401.669759][T29672] team0: Port device team_slave_1 added [ 1401.748157][T29672] device hsr_slave_0 entered promiscuous mode [ 1401.785547][T29672] device hsr_slave_1 entered promiscuous mode [ 1401.825096][T29672] debugfs: Directory 'hsr0' with parent '/' already present! [ 1401.876627][T29672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.883737][T29672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1401.891300][T29672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.898446][T29672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1401.991628][T29672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1402.017866][T23890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1402.033592][T23890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.055665][T23890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.078007][T29672] 8021q: adding VLAN 0 to HW filter on device team0 [ 1402.091895][T23890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1402.101540][T23890] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.110104][T23890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.129843][T29536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1402.139189][T29536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.146379][T29536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1402.168754][T29536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1402.188296][T23890] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1402.198083][T23890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1402.207896][T23890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1402.222192][T29672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1402.242465][T29672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1402.252848][ T1485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1402.301345][T29672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1402.522833][T29766] x86/PAT: syz-executor.3:29766 map pfn RAM range req write-combining for [mem 0x552f0000-0x552f0fff], got write-back 18:44:17 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x68) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept$alg(r3, 0x0, 0x0) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) recvmmsg(r4, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) accept(r4, 0x0, 0x0) 18:44:17 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x04', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg$nfc_llcp(r3, &(0x7f0000002400)=[{&(0x7f0000000140)={0x27, 0x1, 0x1, 0x6, 0x9, 0x5, "30b4b5f58ff098aadb5a200b1a69564f30b01c364aeaa04bc8882f8d7cea3b3baa02fe4794f739008af1ba7663360362eaf5345ed7440a7f090a37af3d777e", 0x1a}, 0x60, &(0x7f00000000c0)=[{&(0x7f00000001c0)="2aa9085877d939674c43efa5692b00a86509cf3979c866ad5f841186fc20d1c6224dad094910a2b075c2c9aa76d0dc0f5a8bf8c0058e4c27af87f3ca2a8df660c6b4d7035fe964005f49d30ea3a78115c414c6042741fd8df14a46b012ee46bcd4677e5e55e3047afb8553428d94882ffc37139694d8f7db31855bacf01b59cadda77d9ec564f67b", 0x88}, {&(0x7f0000000280)="c4b7c825bde630d20daba88b4707675683774ce47d9712ac49b8a944fcfcb360fba4b6dc275a8b0218ab65ef274e60ef9e730e31af77aef5fe94478fb5356ad401a1adc418a39a480cacb1899de5993a8c4510a2ada555574141c5b569f58afd3238aac0b44e7cb0d65ee90d7027d75bd3f6c31e96d4caf7414927", 0x7b}, {&(0x7f0000000000)="53692d4499dd1b1ea080741e16845762da3661638439f560c2000b12ecf5c23c20b368c2608827e0eeb639ff85cfb68e", 0x30}], 0x3, &(0x7f0000000300)={0x50, 0xff, 0xfbb1, "3fde038af41cbdd1d04ed51db943952211225c57d782c98f472f292016b6932ecda1505708ad8cb49cd1048a25c012a193929b16531b7fe5a08eed"}, 0x50, 0x800}, {&(0x7f0000000380)={0x27, 0x1, 0x0, 0x2, 0x6, 0x66, "2eb04f983837dab70e3eecad4932f2665d5d0a00fb6bafd2a3829f371adcca89634fcb7e0fb4ed9cb7101217fe4dbbdf8d679c835c19f4d009386c061d75bf", 0x2e}, 0x60, &(0x7f0000000600)=[{&(0x7f0000000400)="78b3ddddbe23f3005af35123ea7318f09e66911bec5edb5dc87adb8a89c04402d820f4fd26380ad6c44fc7a08dacc5d6ad2c0c6982dcac3c46bdeff309d017ed694d51429d4424ba9cea7b0414651093c3f6974e517a5b7449401c2cd0bd2f58edad2622e548367b642d840a15c0f43f48baebfa2ce15cd6203e30291458b62540e87db67b7aab9a67ab5e0176657b7b5a01d06d2d8c53a0a5a0432e6c9458182c65d204d804082dc882484846c421001c2b94a4f349a44b2235df842341c8fa9e0c9ce7e927088494541234bd2ef99cd274dd466a05fdf13601dc2df00b7e939ef901f783472829b4c1fa094069616fd837d5", 0xf3}, {&(0x7f0000000500)="ed380f28ca63804b5381845084b5886bd4ac6f89439c237576cdaa54da3869c03b9f65491a9f84d9128cffd01608cae15d70a5583011f55dc2e5af9c3898976f45b7874decac39c8390ae650d9b2beda1eed01fb26e57d060250972902a0bf4d1a82a4a95aa2dc70390756e28c6c1948bba59b1ed34d7f3aea74f2cbc844c365bc5492e885e6e54b2258c381af", 0x8d}, {&(0x7f00000005c0)="ec6fc215006c49c8c17986c90f5da432b3aa1f3761eccdffa9680872a30d5122c1e307334617487a2dedb525", 0x2c}], 0x3, &(0x7f0000000640)={0xf0, 0xd413014a986deca1, 0x6, "44b24ea6c74fa17cceecc526b44c62dfb0323a69893a7e11322109af05c2b81f5de51671d9051c510db5e67cbbdeabed05db1d2efb522746719cbfea1c9ddf0befb9175784a26e258ba301c57c69fb196298d22d5eb61c2344a8c11e5431b3627bf486cd9ec61e46a061b5ca71275cb1c419ace0922d3128efb40c1dadad6ed4fdaee9f47825d6e23ae367e17c4300a51104c6993db2a06334a16b3c60a6fa7a037407c0c3b34e7476f6cd4516f560d86ee8fe78caf4a6842077a85c0dc33cc294e7c9ee7dce3b81a359881293aa21cf84d0ea32296969322cb208"}, 0xf0, 0x20000000}, {&(0x7f0000000740)={0x27, 0x0, 0x0, 0x6, 0x0, 0x1, "77d21a9adb48865a1857f42ace9169d98c5c299530ad7a872425c1bafe15da7f6a72a2c72de8b6e434d5e6bc90227f14813e12202d5243fd2ca6c1f150e453", 0xc}, 0x60, &(0x7f0000001d00)=[{&(0x7f00000007c0)="f0c9bae506af3d9efb36845d0ba128ee915b6a27240645639a26fe7fbc55673bb17857dd7e4c4dce86d6583af1d39cb754477c8ea6d6f0bbfaaac5113028bb57e5eae9bd4c870f1c460bd2936781655ee50a0447e72ccfc485f696b94e05115f10ed773d8fb1d773a5cfdead7081ff52b4be9095511f288260a984f1c85a2865", 0x80}, {&(0x7f0000000840)="889ebacfa9ec5ecd7f615dc286c3ce9005c2dbcdb508205e82a90d48566a2e539786103fb14d54c878cbfabd4b90f9f03d17e78ce5e94feb0cda3d43533328f771de51bfebc5e662200beb176de9dcb0", 0x50}, {&(0x7f00000008c0)="fbe420ab447d6aa67493e8d7ba6a5fa241e3f86cd78b8de898dff51d1e7cf07ebee94684c43ba466be10adf537672ccd3e01abfdf5eac1d2c201ca771dd37c229018e3ae842b255b42a5bc7d2191db70682414cc606809f7d4786dd28106e341046d2b6cedc914f6efedc50a2ef9498481dec0d5c8f40d825001c981a9d4dae9661a0bff232a1709f08be9880bc9c35027e9261ec8c318052234a3b9ae9591c16539ee9956ab4b379f45f215745b07797bda4679", 0xb4}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="41bcbabc167a27d29815193f1449764283bae8b88173e2c0b27babbec4c4b2344bb723280eea25111e17cce97062490336260981dcd2c8c4e1954df4c5e3c69a15522de8b165cdd159b3918653dbc6e7f33da65858db9fa3ac69f40d23efc9945fe77d6735246d8163bce33e391e156bd4c20b3657e94fdd21c5b7c2d0bbaf46e20230a47e09cb70d488ebca4b16b31da4296587d85885991223c462d055acccdf42379dc6d85a4096c49ab27920e61a46a0b0bbefc9fe45b4", 0xb9}, {&(0x7f0000001a40)="b944f149f69de15f10b175b956729d4351aacd63f44e00744bc5fac6335dfdcd01c7357a30aed3e427dfc63923771ce105304d10aa1c6fb5073dc32aa28816a92f62874515b855cdbe84a8da1251c6a59ea084163611f28c89", 0x59}, {&(0x7f0000001ac0)="bcb209616e1a9fcab939385183de22403fd3c14e76e6e1a03d11812cfd0dc20d752550de0fee6cbd8f468c56e7de25c3ba6379b7698ee169bf67ac5a6f115e20db3fd48341e74ab7c6ef1fb2d810b87befb14ac608", 0x55}, {&(0x7f0000001b40)="6f81db26f2f6401bff118f39746e24172e298ea4c076e47e79a7f39ff683341e2c416b479038f0b1c59343bedb892fa9e00beabd4b6ba95d5b41bcabc16cb9fc4a38927e54f866cba257765a4511fcec56316e039690115c5d9f8a72e55f70bd24395c1aa553a69a6d5e457e34751ed1f7439c0738a68d128a4df6577f9c6897bc6c14e052a5be84cf8153faa39f642ad5d1dd485a547e610a7a167426ccffa2b8d97310daf42705f1a6e70d7ecca22d68f9994463ecfa3087e82c51cabb18c57171603aa2aef3510272d1c5594c", 0xce}, {&(0x7f0000001c40)="a84e380e0b684b1191b3a0580ee173fd6146d9a75924dc46d364669e9c4823257923c2d597e3f6", 0x27}, {&(0x7f0000001c80)="e8ccb829cd71aea7a026bad06af69b700f8aba23168693a9ea1118085f32cbfb009bbe715b3d38ab6a77893ac613c69bb882bc1e4a705a2a1dad5e094965561a979aa27022e687644398ea0e56c64f4edf9a8b0118e3c8a0c7a2c279c9878596b0795b7cd0ae6168c6ede56e322115615b2d94a552c054dddb2470c37a22", 0x7e}], 0xa, 0x0, 0x0, 0x927c4f9350ed1e2e}, {&(0x7f0000001dc0)={0x27, 0x1, 0x2, 0x5, 0x81, 0xc8, "15f63f9a3984c150ae7d778ee938b74c2f967c686de5095eb22d8d85b52d18003648734555871a69e817c91e53d6f6a75d3097965e5676d2350ad4283be203", 0x1}, 0x60, &(0x7f00000022c0)=[{&(0x7f0000001e40)="79020723b27f341706ac2f30ec", 0xd}, {&(0x7f0000001e80)="56ec036c83e307aa002b7f48fa103eb8e9e6f66c5b612707bfa7f7d4257d8582aa0aef087c01a1ca8e92499c4cf52a8c7e05466425ddb21cb49a2f0b7ee5", 0x3e}, {&(0x7f0000001ec0)="5c7ee459371106393c545065fe07111657ce6559719abfee92bde3dd79da17bf0a1e9d72abfa3c06283cd264e7d915b457de62b2d2942c9b6e131422880e66170419c49073cee61a16e0091c9be1f2f972336628b2806c725fd21e7789adc0c57add177710dd398a235d22b5f7d2c473b82f29d5392f9cb5ded768ea1bdbbc0c1daed61e27d91870a68b97703d7b83dd35c98098f2b58725a72cd8eeb8981c18f7765ad1320175deb9aaf4334084eb9c61af02820cd0a06309f8845524de151af8cfa9501a78ce5c699929607488d68f21a81b31f45467e4a3d9", 0xda}, {&(0x7f0000001fc0)="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", 0xfd}, {&(0x7f00000020c0)="fa3d03a821de64a539aaeefe0cc28a631bd7e674ea90ac7f1868ccb6a0e86af45f4a1b26e26dc7a9cc91ec01861fa5a6a04291fa3f540ebc635d820eba1db3abf230f42512978bba75e6e426a8f134fa15835e160d6c53a3e8c3eba1d4d042c893efe0066345929a7a7338f01afe6cc3042c7a139c39da5f40e15979544b02e7c0b9857c9600c1f97d346e7e0466ed67f40187a0f857a519cc69b2f1f8ffc5c216ce4e8fdc4806e362796e3c4a6db32eecc18bfe0300a710c12a7b8bee7223f1748c09676696b566ffa0ba6dda80671799859e7cf189e449de581f34fdcc9cdbf8e747c54cfa41e3d543b09f12c9", 0xee}, {&(0x7f00000021c0)="b411ea7e4efe285e5be9fb8d44c2dd89c0e5fca8632619e6f38c3ffc3989d371d772cd29bad01a2d5f521bd7fa7a237f34cf", 0x32}, {&(0x7f0000002200)="c3adf4f72276abd428efdffcabca29647998492f9be585dc4383bbbb3b61a3906f868abfc71b381b913b8182519c41448be0215a8abe9942eeb70993c69292f4ee5d1928929d00f5075100b7f2fad7dfbef5811daa235e92923552f7491ba2238531351f6b8b8d56ffddeee3609a2449cba7b2249465a2bfc387df14a298927437a95d76695db63c100a982e291720d5f7ea8909f620b4e3e462a3b9f99ffbb123d4cf0b7347a84df9031b713db0f14d0db0982953bb5c3a6353476b", 0xbc}], 0x7, &(0x7f0000002340)={0xc0, 0x102, 0xcc, "1f69261d1f351fb428d5baba6c67a0482c52555ebffae38c34d5353896705237e2d762eb3f407cacbe73c3f10b33df14ffbb62d3fff22cb7db8f3da62f06329df06868528cd5587c3b36e736bad14269479a52248f212620a26d55f58c87a9f74b098d8060e35ef26d3e258f6790098c79852a737aa6e9c58a1059968124a50a8fef07b1223e7407c6e6df33856be9679b1cddd4679f888a866e1e304303393278e4f28970b0dfe88eb72e"}, 0xc0}], 0x4, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={r8}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000002500)={r8, @in={{0x2, 0x4e24, @multicast2}}}, 0x84) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:44:17 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) 18:44:17 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0xd93800, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@remote, @loopback, 0x0}, &(0x7f00000000c0)=0xc) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) fstat(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@dev={0xfe, 0x80, [], 0xe}, @in6=@remote, 0x4e24, 0x4, 0x4e24, 0x8001, 0xa, 0x20, 0x6141ee6f5444fc4, 0x3a, r4, r6}, {0xfffffffffffff000, 0x100, 0x9, 0x8, 0x10001, 0x0, 0x2, 0xfffffffffffffff9}, {0x0, 0xfffffffffffff001, 0x800}, 0x10001, 0x6e6bb7, 0x2, 0x1, 0x1, 0x1}, {{@in6=@mcast2, 0x4d3, 0xff}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x3500, 0x1, 0x0, 0x90, 0x6, 0x5, 0x6}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r7, 0x4, 0x2000) 18:44:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8198, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0a85352, &(0x7f00000001c0)={{0x81, 0x66}, 'port1\x00', 0x0, 0x0, 0x7, 0x100, 0xcd8f, 0x1ff, 0x9, 0x0, 0x0, 0x3}) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1403.405448][T29772] input: syz1 as /devices/virtual/input/input1306 18:44:18 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1403.500357][T29772] input: syz1 as /devices/virtual/input/input1307 18:44:18 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x04', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) ioctl$VIDIOC_G_MODULATOR(r5, 0xc0445636, &(0x7f0000000040)={0x9, "adfa5687ad6cebe595753ef40f3c77e0a1745c2f579f742e5c7a500b3afff85d", 0x40, 0x8000, 0x6, 0x10, 0x5}) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r6, 0x4, 0x800) 18:44:18 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) 18:44:18 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x68) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept$alg(r3, 0x0, 0x0) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) recvmmsg(r4, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) accept(r4, 0x0, 0x0) [ 1403.899466][T29803] x86/PAT: syz-executor.4:29803 map pfn RAM range req write-combining for [mem 0x58c30000-0x58c30fff], got write-back [ 1403.953035][T29808] x86/PAT: syz-executor.4:29808 map pfn RAM range req write-combining for [mem 0x57350000-0x57350fff], got write-back 18:44:18 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) 18:44:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/\x7f}\x01\x00\x00\x00\x00\x00\x00\x00\"\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) fcntl$setstatus(r3, 0x4, 0x2000) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101000, 0x0) 18:44:18 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x68) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept$alg(r3, 0x0, 0x0) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) recvmmsg(r4, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) accept(r4, 0x0, 0x0) 18:44:18 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8198, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0a85352, &(0x7f00000001c0)={{0x81, 0x66}, 'port1\x00', 0x0, 0x0, 0x7, 0x100, 0xcd8f, 0x1ff, 0x9, 0x0, 0x0, 0x3}) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:44:18 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x04', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x7) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) 18:44:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000), 0x4) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$SIOCRSACCEPT(r4, 0x89e3) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:44:19 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) 18:44:19 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000095a508c20575b90e803aaeedc8f5c75a0006427c867229f20a0e2885507c9af2286dc88988f660eab4e8b4d9bbb11a963341427b81b76c702fb665252126290db8376c122a59718bde2437210282d4e6eef09563ad1b0d99502a2c6eac5128e88408485b98e85a5b39a5240a97399d280b8b6029a17331fe2e9f633c2593a98380b31bc2cc8d20c17e61d16ba1a578fabea944e4636d792037c5988adbce5646121caf9651b171807c6df5950e6348b03cb263f8d4c826c0f28d9a31d6ee75f7422ede8acbc32d70043cf2eb33f3573b6ae848"], 0x68) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept$alg(r3, 0x0, 0x0) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r4, 0x0, 0x0) 18:44:19 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) 18:44:19 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x04', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1404.623383][T29843] x86/PAT: syz-executor.5:29843 map pfn RAM range req write-combining for [mem 0x57de0000-0x57de0fff], got write-back 18:44:19 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x68) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept$alg(r3, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) 18:44:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, 0xffffffffffffffff) 18:44:19 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1404.906804][T29862] x86/PAT: syz-executor.4:29862 map pfn RAM range req write-combining for [mem 0x59fd0000-0x59fd0fff], got write-back 18:44:19 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x68) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept$alg(r3, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) [ 1405.028573][T29867] x86/PAT: syz-executor.4:29867 map pfn RAM range req write-combining for [mem 0x52b90000-0x52b90fff], got write-back 18:44:19 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:19 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) 18:44:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x100000001}, 0x0, 0xcad5}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x7ff, 0x2a080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r5, 0x415, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x629010}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1a4, r5, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff908}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72c4ca81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7e2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}]}, @TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x94, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x92d8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0xfffffffffffffe5d, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}]}, 0x1a4}}, 0x4000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x9) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={r9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={r9, 0x8}, 0x8) sendto$inet(r6, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r6, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1405.350351][T29884] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1405.366321][T29884] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1405.385284][T29884] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1405.400029][T29884] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x68) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept$alg(r3, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) 18:44:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r9, 0x0) ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f00000001c0)={0x3, r9}) r10 = getpgrp(0xffffffffffffffff) r11 = getpid() kcmp$KCMP_EPOLL_TFD(r11, r10, 0x7, r3, &(0x7f0000000000)) setpriority(0x0, r10, 0x81) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r12, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x1) r13 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x80, 0x0) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r14, &(0x7f0000000400)={'syz1\x00', {}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) dup2(r13, r14) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r12, 0xc06855c8, &(0x7f00000000c0)={0xd, 0x218d, {0x52, 0x2, 0x102, {0x100, 0x400}, {0x5, 0xb47d}, @cond=[{0x72, 0x3ff, 0x7, 0x2, 0x1f, 0x1}, {0x8ca, 0x312, 0x2f67, 0x9, 0x8}]}, {0x0, 0xfff, 0x4, {0x7, 0x2}, {0x4, 0x8}, @ramp={0x8, 0x6, {0x8, 0x117, 0x4, 0xff}}}}) r15 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r16 = socket$packet(0x11, 0x7, 0x300) fsync(r16) syncfs(r15) fcntl$setstatus(r12, 0x4, 0x2000) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000040)) 18:44:20 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x200000) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0xb) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:44:20 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1405.517235][T29884] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1405.518957][T29894] x86/PAT: syz-executor.4:29894 map pfn RAM range req write-combining for [mem 0x56070000-0x56070fff], got write-back [ 1405.550494][T29884] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1405.570288][T29894] x86/PAT: syz-executor.4:29894 map pfn RAM range req write-combining for [mem 0x5b4a0000-0x5b4a0fff], got write-back [ 1405.584771][T29884] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x68) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r4, 0x0, 0x0) [ 1405.622429][T29884] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 18:44:20 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x04', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 18:44:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x68) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) 18:44:20 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 18:44:20 executing program 5 (fault-call:2 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x0) 18:44:20 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) 18:44:21 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x1}) 18:44:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x0) 18:44:21 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r5) open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x20) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) recvfrom$netrom(r7, &(0x7f00000000c0)=""/11, 0x0, 0x100, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$inet(r6, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1406.551940][T29940] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:44:21 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x1}) [ 1406.593850][T29940] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1406.630447][T29940] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) 18:44:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x2, 0x0) [ 1406.678062][T29940] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1406.800048][T29940] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1406.882339][T29940] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1406.912460][T29940] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r2, 0x0, 0x0) 18:44:21 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x1}) [ 1406.972969][T29940] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x4, 0x0) 18:44:21 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:21 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927}) 18:44:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x2000000, 0x0) 18:44:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r2, 0x0, 0x0) 18:44:22 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927}) [ 1407.365945][T29979] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1407.445291][T29979] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1407.477002][T29979] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1407.535533][T29979] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:44:22 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x4000000, 0x0) [ 1407.651186][T29979] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:44:22 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927}) 18:44:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r2, 0x0, 0x0) [ 1407.692684][T29979] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1407.732064][T29979] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:22 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x200000000000000, 0x0) [ 1407.790453][T29979] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r5) open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x20) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) recvfrom$netrom(r7, &(0x7f00000000c0)=""/11, 0x0, 0x100, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$inet(r6, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:44:22 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r0, 0x0, 0x0) 18:44:22 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x400000000000000, 0x0) [ 1408.226349][T30019] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1408.250774][T30019] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1408.252077][T30017] x86/PAT: syz-executor.2:30017 map pfn RAM range req write-combining for [mem 0x67130000-0x67130fff], got write-back [ 1408.260000][T30019] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1408.300716][T30019] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1408.390569][T30019] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:44:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r0, 0x0, 0x0) 18:44:23 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x2) [ 1408.438899][T30019] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1408.487397][T30019] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1408.541423][T30019] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:23 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:23 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) accept4$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x93aae3499580a713) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0x0, 0x1, 0x0, 0x0) 18:44:23 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x4) 18:44:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r0, 0x0, 0x0) [ 1408.964420][T30049] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:44:23 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x2000000) [ 1409.083726][T30049] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:23 executing program 2 (fault-call:1 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1409.154409][T30049] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1409.175442][T30049] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r1, 0x0, 0x0) 18:44:23 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101080, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000000c0)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r5 = socket(0x11, 0x800000003, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f00000001c0)=""/113, 0x71) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r7, &(0x7f00000001c0)=""/113, 0x71) keyctl$search(0xa, r6, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, r7) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendto$inet(r4, &(0x7f0000d7cfcb), 0xfffffffffffffe3c, 0x0, 0x0, 0x61a0100430febb28) 18:44:23 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x4000000) [ 1409.266819][T30066] FAULT_INJECTION: forcing a failure. [ 1409.266819][T30066] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.343415][T30049] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1409.386714][T30049] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1409.418272][T30066] CPU: 0 PID: 30066 Comm: syz-executor.2 Not tainted 5.4.0-rc2+ #0 [ 1409.426369][T30066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1409.436478][T30066] Call Trace: [ 1409.439795][T30066] dump_stack+0x172/0x1f0 [ 1409.444149][T30066] should_fail.cold+0xa/0x15 [ 1409.448899][T30066] ? fault_create_debugfs_attr+0x180/0x180 [ 1409.454728][T30066] ? ___might_sleep+0x163/0x2c0 [ 1409.459878][T30066] __should_failslab+0x121/0x190 [ 1409.464910][T30066] should_failslab+0x9/0x14 [ 1409.469629][T30066] __kmalloc+0x2e0/0x770 [ 1409.473915][T30066] ? mark_held_locks+0xf0/0xf0 [ 1409.478811][T30066] ? mark_lock+0xc2/0x1220 [ 1409.483280][T30066] ? _parse_integer+0x190/0x190 [ 1409.488143][T30066] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1409.493865][T30066] tomoyo_realpath_from_path+0xcd/0x7b0 [ 1409.499462][T30066] ? tomoyo_path_number_perm+0x193/0x520 [ 1409.505108][T30066] tomoyo_path_number_perm+0x1dd/0x520 [ 1409.510562][T30066] ? tomoyo_path_number_perm+0x193/0x520 [ 1409.516227][T30066] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1409.522375][T30066] ? __f_unlock_pos+0x19/0x20 [ 1409.527078][T30066] ? __fget+0x384/0x560 [ 1409.531236][T30066] ? ksys_dup3+0x3e0/0x3e0 [ 1409.535668][T30066] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1409.541941][T30066] ? fput_many+0x12c/0x1a0 [ 1409.546386][T30066] tomoyo_file_ioctl+0x23/0x30 [ 1409.551152][T30066] security_file_ioctl+0x77/0xc0 [ 1409.556081][T30066] ksys_ioctl+0x57/0xd0 [ 1409.560234][T30066] __x64_sys_ioctl+0x73/0xb0 [ 1409.564831][T30066] do_syscall_64+0xfa/0x760 [ 1409.569400][T30066] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1409.575316][T30066] RIP: 0033:0x459a59 [ 1409.579214][T30066] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1409.599049][T30066] RSP: 002b:00007ff441985c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1409.607471][T30066] RAX: ffffffffffffffda RBX: 00007ff441985c90 RCX: 0000000000459a59 [ 1409.615779][T30066] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1409.623749][T30066] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1409.631841][T30066] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4419866d4 [ 1409.640168][T30066] R13: 00000000004c2774 R14: 00000000004d6180 R15: 0000000000000004 [ 1409.682909][T30049] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1409.750375][T30049] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1409.759167][T30066] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1409.768800][T30074] encrypted_key: insufficient parameters specified 18:44:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x200000000000000) [ 1409.799365][T30074] encrypted_key: insufficient parameters specified 18:44:24 executing program 2 (fault-call:1 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) 18:44:24 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\xc0', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1409.988216][T30085] FAULT_INJECTION: forcing a failure. [ 1409.988216][T30085] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1410.001478][T30085] CPU: 1 PID: 30085 Comm: syz-executor.2 Not tainted 5.4.0-rc2+ #0 [ 1410.009410][T30085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1410.019495][T30085] Call Trace: [ 1410.022820][T30085] dump_stack+0x172/0x1f0 [ 1410.027193][T30085] should_fail.cold+0xa/0x15 [ 1410.032005][T30085] ? fault_create_debugfs_attr+0x180/0x180 [ 1410.037863][T30085] ? lock_downgrade+0x920/0x920 [ 1410.042766][T30085] should_fail_alloc_page+0x50/0x60 [ 1410.048004][T30085] __alloc_pages_nodemask+0x1a1/0x900 [ 1410.053412][T30085] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1410.059782][T30085] ? debug_smp_processor_id+0x3c/0x214 [ 1410.065467][T30085] ? __alloc_pages_slowpath+0x2910/0x2910 [ 1410.071226][T30085] ? perf_trace_preemptirq_template+0x2e2/0x460 [ 1410.077510][T30085] ? __kasan_check_read+0x11/0x20 [ 1410.082579][T30085] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1410.088339][T30085] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1410.094232][T30085] cache_grow_begin+0x90/0xd20 [ 1410.099137][T30085] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1410.104919][T30085] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1410.111895][T30085] __kmalloc+0x6b2/0x770 [ 1410.116175][T30085] ? mark_held_locks+0xf0/0xf0 [ 1410.120978][T30085] ? mark_lock+0xc2/0x1220 [ 1410.125449][T30085] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 1410.131425][T30085] tomoyo_realpath_from_path+0xcd/0x7b0 [ 1410.137040][T30085] ? tomoyo_path_number_perm+0x193/0x520 [ 1410.142724][T30085] tomoyo_path_number_perm+0x1dd/0x520 [ 1410.148219][T30085] ? tomoyo_path_number_perm+0x193/0x520 [ 1410.153904][T30085] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1410.159847][T30085] ? __f_unlock_pos+0x19/0x20 [ 1410.164868][T30085] ? __fget+0x384/0x560 [ 1410.169066][T30085] ? ksys_dup3+0x3e0/0x3e0 [ 1410.173526][T30085] ? trace_hardirqs_off_thunk+0x1a/0x20 [ 1410.179112][T30085] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1410.185394][T30085] tomoyo_file_ioctl+0x23/0x30 [ 1410.190199][T30085] security_file_ioctl+0x77/0xc0 [ 1410.195306][T30085] ksys_ioctl+0x57/0xd0 [ 1410.199505][T30085] __x64_sys_ioctl+0x73/0xb0 [ 1410.204105][T30085] do_syscall_64+0xfa/0x760 [ 1410.208603][T30085] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1410.214486][T30085] RIP: 0033:0x459a59 [ 1410.218376][T30085] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:44:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x400000000000000) [ 1410.238073][T30085] RSP: 002b:00007ff441985c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1410.246663][T30085] RAX: ffffffffffffffda RBX: 00007ff441985c90 RCX: 0000000000459a59 [ 1410.254672][T30085] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1410.263281][T30085] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1410.271283][T30085] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4419866d4 [ 1410.279282][T30085] R13: 00000000004c2774 R14: 00000000004d6180 R15: 0000000000000004 18:44:25 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000000)='security.evm\x00', &(0x7f00000000c0)=@ng={0x4, 0xf, "742ff4"}, 0x5, 0x1) 18:44:25 executing program 2 (fault-call:1 fault-nth:2): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1410.560944][T30099] encrypted_key: insufficient parameters specified 18:44:25 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:25 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r1, 0x0, 0x0) [ 1410.629519][T30100] encrypted_key: insufficient parameters specified [ 1410.664171][T30103] input: syz1 as /devices/virtual/input/input1309 [ 1410.780490][T30105] input: syz1 as /devices/virtual/input/input1310 18:44:25 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x40000000a925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x3) [ 1410.934711][T30114] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1410.965365][T30114] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:25 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_OIF={0x8, 0x4, r3}]}, 0x24}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=@canfd={{0x3, 0x1}, 0x3e, 0x0, 0x0, 0x0, "40e053cd8553c0ce662e8e7f8e1b5408fd9582acbb518ecb65fe4805276cb2d5b77d7bfaa7c06544f16b7f88473b4c7afb09ce360bffe02906d0b89166b53cde"}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0xe041) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r4, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r10, 0x0) ioctl$BLKROGET(r10, 0x125e, &(0x7f0000000000)) sendto$inet(r7, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r7, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1411.018518][T30117] FAULT_INJECTION: forcing a failure. [ 1411.018518][T30117] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.035418][T30114] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:25 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r1, 0x0, 0x0) [ 1411.113842][T30114] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1411.135617][T30117] CPU: 0 PID: 30117 Comm: syz-executor.2 Not tainted 5.4.0-rc2+ #0 [ 1411.144836][T30117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1411.156155][T30117] Call Trace: [ 1411.159978][T30117] dump_stack+0x172/0x1f0 [ 1411.167679][T30117] should_fail.cold+0xa/0x15 [ 1411.173132][T30117] ? fault_create_debugfs_attr+0x180/0x180 [ 1411.179946][T30117] ? ___might_sleep+0x163/0x2c0 [ 1411.185620][T30117] __should_failslab+0x121/0x190 [ 1411.191028][T30117] should_failslab+0x9/0x14 [ 1411.197640][T30117] kmem_cache_alloc_trace+0x2d3/0x790 [ 1411.205901][T30117] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1411.212409][T30117] ? _copy_from_user+0x12c/0x1a0 [ 1411.217625][T30117] ion_ioctl+0x2e7/0xd20 [ 1411.221925][T30117] ? _ion_buffer_destroy+0xb0/0xb0 [ 1411.227222][T30117] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1411.234026][T30117] ? _ion_buffer_destroy+0xb0/0xb0 [ 1411.240861][T30117] do_vfs_ioctl+0xdb6/0x13e0 [ 1411.247132][T30117] ? ioctl_preallocate+0x210/0x210 [ 1411.252431][T30117] ? __fget+0x384/0x560 [ 1411.256581][T30117] ? ksys_dup3+0x3e0/0x3e0 [ 1411.261368][T30117] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1411.267784][T30117] ? fput_many+0x12c/0x1a0 [ 1411.272570][T30117] ? tomoyo_file_ioctl+0x23/0x30 [ 1411.277872][T30117] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1411.284397][T30117] ? security_file_ioctl+0x8d/0xc0 [ 1411.289513][T30117] ksys_ioctl+0xab/0xd0 [ 1411.293888][T30117] __x64_sys_ioctl+0x73/0xb0 [ 1411.298519][T30117] do_syscall_64+0xfa/0x760 [ 1411.303299][T30117] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1411.309548][T30117] RIP: 0033:0x459a59 [ 1411.313640][T30117] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1411.334042][T30117] RSP: 002b:00007ff441985c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1411.342545][T30117] RAX: ffffffffffffffda RBX: 00007ff441985c90 RCX: 0000000000459a59 [ 1411.350770][T30117] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1411.359362][T30117] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1411.367354][T30117] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4419866d4 [ 1411.376053][T30117] R13: 00000000004c2774 R14: 00000000004d6180 R15: 0000000000000004 18:44:26 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x67d6a8d12eee260f, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x0) [ 1411.461916][T30114] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1411.516409][T30114] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1411.597344][T30114] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1411.615135][T30114] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) 18:44:26 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x0f', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:26 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x500, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f00000001c0)={0x0, 0x5, 0x574, 0x200}) lseek(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x4, 0x8000) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000140)=0xfffffc01) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) ioctl$PPPIOCGDEBUG(r6, 0x80047441, &(0x7f00000000c0)) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r9, 0x0) ioctl$DRM_IOCTL_CONTROL(r9, 0x40086414, &(0x7f0000000000)={0x2}) 18:44:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) [ 1411.943544][T30143] x86/PAT: syz-executor.5:30143 map pfn RAM range req write-combining for [mem 0x39ea0000-0x39ea0fff], got write-back [ 1412.011332][T30143] x86/PAT: syz-executor.5:30143 map pfn RAM range req write-combining for [mem 0x673c0000-0x673c0fff], got write-back 18:44:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) 18:44:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) 18:44:26 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:26 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:44:26 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') [ 1412.351184][T30170] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:44:27 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) [ 1412.399767][T30170] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1412.441991][T30170] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x500100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) lseek(0xffffffffffffffff, 0x800000000000058, 0x1) [ 1412.482523][T30170] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1412.595365][T30170] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1412.615261][T30170] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:27 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) setuid(0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1412.653080][T30170] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1412.669210][T30184] input: syz1 as /devices/virtual/input/input1311 18:44:27 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) [ 1412.732066][T30170] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1412.785358][T30184] input: syz1 as /devices/virtual/input/input1312 18:44:27 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) lseek(r1, 0x0, 0x0) 18:44:27 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x1000000000a927, 0x1}) r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x4, 0x80) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x1010, r0, 0x0) 18:44:27 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) [ 1413.072316][T30200] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1413.125435][T30200] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1413.166348][T30200] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:27 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:44:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x988b7f571e66cb30, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000200)={{0x2, 0xff}, 'port1\x00', 0x51, 0x10000, 0x3, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x3}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000002c0)=0x2) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f00000001c0)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="01e200009c97b2aad83946fef94219ea70a42a74c2ed1414bd2f0ecff0e2b59485169453e6b2b390b5a589ca9ddc7ae0fe38455c2cd32f8c73a41ac45320fe54b3a251d789b8b1ba2a02449e890904ce4c", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={r9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000140)={r9, 0xa, "1336862e6bfa863763f0"}, &(0x7f0000000180)=0x12) lseek(r1, 0x0, 0x0) [ 1413.206615][T30200] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x1000000000a927, 0x1}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'batadv0\x00', @local}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) [ 1413.302864][T30200] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1413.332008][T30200] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:28 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) [ 1413.362525][T30200] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1413.415179][T30200] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1413.441235][T30219] x86/PAT: syz-executor.5:30219 map pfn RAM range req write-combining for [mem 0x39f10000-0x39f10fff], got write-back 18:44:28 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1413.552913][T30219] x86/PAT: syz-executor.5:30219 map pfn RAM range req write-combining for [mem 0x39f30000-0x39f30fff], got write-back 18:44:28 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) 18:44:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007400)=[{{&(0x7f00000000c0)=@caif=@rfm, 0x80, &(0x7f0000003600)=[{&(0x7f0000000140)=""/216, 0xd8}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/154, 0x9a}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/129, 0x81}, {&(0x7f0000007640)=""/4094, 0x1000}, {&(0x7f00000033c0)=""/136, 0x88}, {&(0x7f0000003480)=""/215, 0xd7}, {&(0x7f0000003580)=""/74, 0x32}], 0x9, &(0x7f00000036c0)=""/94, 0x5e}, 0x4}, {{&(0x7f0000003740)=@nfc, 0x80, &(0x7f0000004a40)=[{&(0x7f00000037c0)=""/72, 0x48}, {&(0x7f0000003840)=""/151, 0x97}, {&(0x7f0000003900)=""/85, 0x55}, {&(0x7f0000003980)=""/133, 0x85}, {&(0x7f0000003a40)=""/4096, 0x1000}], 0x5, &(0x7f0000000000)=""/16, 0x10}, 0x2}, {{&(0x7f0000004ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004b40)=""/166, 0xa6}, {&(0x7f0000004c00)=""/99, 0x63}, {&(0x7f0000004c80)=""/123, 0x7b}, {&(0x7f0000004d00)=""/184, 0xb8}, {&(0x7f0000004dc0)=""/72, 0x48}, {&(0x7f0000004e40)=""/158, 0x9e}, {&(0x7f0000004f00), 0xfffffffffffffd4b}], 0x7, &(0x7f0000004fc0)=""/120, 0x78}, 0x400671}, {{&(0x7f0000005040)=@pptp={0x18, 0x2, {0x0, @remote}}, 0xfffffffffffffe28, &(0x7f0000005100)=[{&(0x7f00000050c0)=""/26, 0x1a}], 0x1, &(0x7f0000005140)=""/4096, 0x1000}, 0x9b5a}, {{&(0x7f0000006140), 0x80, &(0x7f00000072c0)=[{&(0x7f00000061c0)=""/54, 0xffffffffffffff13}, {&(0x7f0000006200)=""/4096, 0x1000}, {&(0x7f0000007200)=""/176, 0xb0}], 0x3, &(0x7f0000007300)=""/216, 0xd8}, 0x131e1e8a}], 0x5, 0x140, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000023c0)='/dev/vsock\x00', 0x101000, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000007540)={@rand_addr="64218e5fb46533a824936595e3a62836", 0x8, 0x38ddabd168771398, 0x3, 0x2, 0x7ff, 0x8a1}, 0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000004f00)={0x0, 0x8, 0x5}, &(0x7f0000007580)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000075c0)={r3, 0x1000, 0x5c17d9513c6dec44, 0x7f, 0x5}, &(0x7f0000007600)=0x18) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) 18:44:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$x25(r1, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x100, 0x9}, {0x80000000, 0x6}], r2}, 0x18, 0x61fc0d2bfc5197e0) lseek(r0, 0x0, 0x4) [ 1413.695582][T30234] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1413.739732][T30234] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1413.801208][T30234] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:28 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) 18:44:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x100000) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000140)) fcntl$setpipe(r0, 0x407, 0x81) [ 1413.870468][T30234] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1413.887429][T30244] Unknown ioctl 19457 [ 1413.907403][T30244] Unknown ioctl 19457 18:44:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="fcfc7513052566416807beeef73f774bcf5e53f0a1c2a9c91add81dc0f5cc20733b5c651ba3c29495318c8fc80f231e41b909ea31f4ed5f4a1cf7dc43566ab3cfbcf0818fd33d3eff4a623ea121487edc735e7864dcaa83bae893ec0e267ccc34fc71a8fe266f349381d5fdbfd3159b0c17b3ea49d48aae4f40221ef159ceebaccc1aec5ff57aed40388d4c4f00d5b15e31186d19f62d80b3fc818cb40b60aae15b256c03ae18c129a4156b552ae022861dddadc7a144e7a713cd1c55bf8454aec9dba717cbace305be348d11f48561542bca1edf610", 0xd6, 0xfffffffffffffffe) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f00000001c0)=""/113, 0x71) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r3}) lseek(r1, 0x0, 0x0) [ 1413.991655][T30234] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1414.058333][T30234] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1414.117378][T30234] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1414.135260][T30234] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1414.137317][T30260] encrypted_key: insufficient parameters specified [ 1414.211095][T30260] encrypted_key: insufficient parameters specified 18:44:29 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000140)={'nat\x00', 0x45, "ddf5514c51d88e8950dc2068bae09b436196ac85a93fddfb8862cee1177b16ee3ced87d6f37875d879ee140342af3b19aeba8a881a27d639b8b85f39da8226009e1f51e52a"}, &(0x7f0000000000)=0x69) 18:44:29 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) 18:44:29 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0), 0xe0640, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000000)=0xdf41, 0x4) lseek(r1, 0x0, 0x0) [ 1414.404790][T30270] input: syz1 as /devices/virtual/input/input1313 [ 1414.488210][T30278] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1414.524806][T30278] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1414.567666][T30278] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1414.610942][T30278] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x1000000000a927, 0x10}) 18:44:29 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) 18:44:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x800) dup2(r1, r2) getgid() ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f00000000c0)="daf140a1ac721af0a8a1587d1ad2e87c", 0x10) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ftruncate(r4, 0x207) lseek(r3, 0x0, 0x0) [ 1414.714584][T30278] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1414.723035][T30278] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1414.761203][T30278] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1414.793493][T30291] input: syz1 as /devices/virtual/input/input1315 [ 1414.836586][T30278] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x4) 18:44:29 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) 18:44:29 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f00000000c0)=0x1, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x22, 0x0, 0xffffffffffffffff}) lseek(r2, 0x0, 0x0) [ 1415.081439][T30306] x86/PAT: syz-executor.2:30306 map pfn RAM range req write-combining for [mem 0x39fa0000-0x39fa0fff], got write-back [ 1415.157929][T30306] x86/PAT: syz-executor.2:30306 map pfn RAM range req write-combining for [mem 0x39fb0000-0x39fb0fff], got write-back 18:44:29 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x0) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000180)="cc1517bafe756284c6d87a9ce71af6cf5aa62d24b725f8cf467f308e7aac5c46e6e884da3c9ddf6e77ef881e72") r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @dev, @remote}, &(0x7f0000000240)=0xc) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000280)={@mcast2, r5}, 0x14) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000140)={0x3, 0x16}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x14123, 0x0) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f00000000c0)=""/90) [ 1415.249869][T30316] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1415.262178][T30316] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1415.350145][T30316] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:30 executing program 5: r0 = socket$caif_stream(0x25, 0x1, 0x3) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r4, 0x80605414, &(0x7f0000000100)=""/212) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000000c0)=0xf) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r6, 0x0, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) [ 1415.395242][T30316] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:30 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) 18:44:30 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5770, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x100, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r9, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r9, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f0000000200)={r10, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x14800, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000180)={'erspan0\x00', 0x9}) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)=""/25) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000000c0)=ANY=[@ANYBLOB="01ffffffffffffffff"]) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x18080, 0x0) bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r11, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r11, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1415.446003][T30321] x86/PAT: syz-executor.2:30321 map pfn RAM range req write-combining for [mem 0x39fe0000-0x39fe0fff], got write-back [ 1415.540128][T30316] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1415.600841][T30332] x86/PAT: syz-executor.5:30332 map pfn RAM range req write-combining for [mem 0x39ff0000-0x39ff0fff], got write-back [ 1415.603412][T30316] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1415.635319][T30316] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:30 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) [ 1415.688389][T30332] input: syz1 as /devices/virtual/input/input1318 [ 1415.708599][T30316] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r4, 0xc0305615, &(0x7f0000000140)={0x0, {0x736e, 0x8000}}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000100)={0x101, 0x7, "45a26713e198a5588934695f1801736ebbf1cd7d219e6af7", {0x3, 0x6}, 0x8}) fsetxattr$security_evm(r1, &(0x7f0000000000)='security.evm\x00', &(0x7f00000000c0)=@md5={0x1, "1194b8a6c30ebd97b48df9637b2c1dad"}, 0x11, 0x1) 18:44:30 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1415.875340][T30344] input: syz1 as /devices/virtual/input/input1319 [ 1415.929686][T30345] x86/PAT: syz-executor.2:30345 map pfn RAM range req write-combining for [mem 0x39420000-0x39420fff], got write-back [ 1416.022708][T30345] input: syz1 as /devices/virtual/input/input1320 18:44:30 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r0, 0x0, 0x0) 18:44:30 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) [ 1416.079214][T30350] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1416.116989][T30350] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1416.185652][T30348] input: syz1 as /devices/virtual/input/input1321 [ 1416.220079][T30350] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1416.295210][T30350] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:31 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xb5c5ba86ed6232bb) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3}}, 0x10) [ 1416.406314][T30350] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1416.455226][T30350] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) [ 1416.512638][T30350] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000140)="37ae525cc29940e294106e81ef30a9b7b067e99a108dd1e52a2963254f65bd89a8cfdbdddb5baf40ede9f1dcc579f073654b418e14d65a4ff48967252f58f0e22e10ba64c2cedc19fa5f799952d313fec34f44416ac6ec1939c418911bcfd5a0a7504a399e92fd479fe5babb121dd298790f502bfefc24961817d72ba672d8d190bfee8c5142cd2c6d0d3e5238206cf088eebddfcbe611570ee7bed2f509d171fe29f8d09c0135c0fb81cce0970a") mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000000c0)={0x4000000, 0x7, 0x11}) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1416.564678][T30350] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x40000) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$llc(r4, &(0x7f0000001600)={0x1a, 0x30a, 0xd0, 0x7f, 0xff, 0x7, @dev={[], 0x2a}}, 0x10) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000001580)={0x8, 0x1, {0x56, 0x6, 0x4, {0x6, 0x4e2}, {0xdf, 0x7fff}, @ramp={0x4, 0x8b97, {0x3, 0x4, 0x5, 0x5}}}, {0x52, 0xffff, 0x0, {0x7fff, 0x6}, {0x3f, 0xe4}, @period={0x5b, 0x80, 0x0, 0x9, 0x7f, {0x5, 0x7d, 0x9}, 0x6, &(0x7f0000000240)=[0x6, 0x5f56, 0x9, 0x3c, 0x8, 0x3]}}}) sendmsg$alg(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)="f6b73ad7d079ee7bdda3cbb8fcb2a22bc24cab0f4ba83e44b53bc5750635465c9e1b14c1221037538953dc9e65563407e5c1ddb4dda829c0c241e823ea4031885abf4a7c4bc1aefa97849653cc1584eede6713fe68a2f0c8550989c4554d8b66363ccf0d9daefbf6ccd3009178d3394994f9790f3553714e0acbdb17bf6688a6ae2536b39d319552e4bc011a336065a8", 0x90}, {&(0x7f0000000180)="4f32f87ee217cb5324ccd91bea171f3565b108e4b5e5d293f6d6f1d2ec46ba073754e0ce48136c6155f635935a2be9dbc22e18813a8b3aeb87e6c56e94456d44ba634c784d62c79ce62de529adcd3aff70e197112252c4764caae6414137e7c5d3afe8ca46872091bcaa561482bf057b059b45821a87e77b82c428224aced7e2fc45b3a8bfe22c05f5827c7c659903ace647f1fa6ad9e507c8520ce3a2ef", 0x9e}, {&(0x7f0000000240)}, {&(0x7f0000000280)="72e8f863f6732639577a9a727539df23d7975fdc21590c22f43b5f4b9e064d558770200408359a313baf0a0783daaebe17ed5cc285929052adbdf6fdf7da55b5124650ac2e689a1200c6d9989fbe7ad457155153599382092c590ca2a838dde55e5be74165570ac6e5992867d8203ad7f23c54e59d63a2443a0fa79d9008c017f035c47ed6b5bc", 0xfffffe2b}, {&(0x7f0000000340)="6b4fe6f447b8ebbc1d", 0x9}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="489aba8afdb05115c02c9032f2e897d57f1a18abc55deb121e27f0d78dab22b08d45ee3e46f1a13f", 0x28}], 0x7, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000000000017010000020000000200000000000000c0000000000000001701000002000000a90000009f5d9713e6eac740aa6814f80da87868d5e154eb3b6e4c86ec0729042a3ae384e439d785b7476e1d94d19cf1f4d3c3990e82bb7ce5e0e34b586c59211691ce0ae3ce9d69fa54eefcbb31b79171fc16d4ca249095aeae2a265968a7d093392f86a98204aace03ab03f686b881dbf3e6bfe96f91648c0e5b37d5dd15b1ff1d7504388b011c600e3d21dd7c09945fcd5742489ad8ed733c736d81336c2c7b4c921740000000"], 0xd8, 0x40}, 0x0) 18:44:31 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) 18:44:31 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x4, 0x0, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000000), 0x800) lseek(r1, 0x0, 0x0) [ 1416.929752][T30389] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:44:31 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={{r0, r1/1000+10000}, {r2, r3/1000+10000}}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1416.972472][T30389] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1417.034377][T30389] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f000025c000)={0x4, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x48298, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0xfffffc7e, 0x40487fe, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0xffffffffffffffcd) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1417.079719][T30389] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) 18:44:31 executing program 5: socket$pptp(0x18, 0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0xc) lseek(r1, 0x0, 0x0) [ 1417.239855][T30389] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1417.255400][T30389] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:32 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000880)={{0x0, @rand_addr=0x5, 0x4e23, 0x2, 'lblc\x00', 0x10, 0x80000000, 0x1f}, {@empty, 0x4e24, 0x0, 0x401, 0x80000000}}, 0x44) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x32d080) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) fcntl$dupfd(r1, 0x0, r4) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000140)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000080000502000000000020ff7f0000000000000500000095000000000000f91828000023298ce6e2aba06d5b4ce58ccc7ff7e83be56c16b62f3c49e213fc040b4d4c887e4530aa5033cedbc7804660bfa5fd51dab54433c6d442", @ANYRES32=r2, @ANYBLOB="00000000090000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0xfffff000, 0x0, 0x0, 0x0, 0x0, [], r5, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x2, 0x7f, 0x46f1}, 0x10}, 0x70) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1417.302088][T30389] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1417.372461][T30389] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1417.455719][T30415] input: syz1 as /devices/virtual/input/input1323 18:44:32 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r1, 0x0, 0x0) 18:44:32 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x1, 0x43}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r3, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r6, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:44:32 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40000) write$P9_RWSTAT(r1, &(0x7f0000000100)={0x7, 0x7f, 0x2}, 0x7) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r2, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r8 = dup(r7) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r11 = dup(r10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r11, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106, 0x3}}, 0x20) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r8, 0x0) write$UHID_DESTROY(r8, &(0x7f0000000140), 0x4) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f0000000000)) [ 1417.780610][T30431] x86/PAT: syz-executor.5:30431 map pfn RAM range req write-combining for [mem 0x66b30000-0x66b30fff], got write-back [ 1417.849620][T30431] x86/PAT: syz-executor.5:30431 map pfn RAM range req write-combining for [mem 0x39450000-0x39450fff], got write-back [ 1417.874016][T30432] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:44:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x8000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1417.898880][T30435] x86/PAT: syz-executor.5:30435 map pfn RAM range req write-combining for [mem 0x39440000-0x39440fff], got write-back [ 1417.916017][T30432] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1417.952791][T30432] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r1, 0x0, 0x0) [ 1418.001999][T30432] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1418.034380][T30431] x86/PAT: syz-executor.5:30431 map pfn RAM range req write-combining for [mem 0x39470000-0x39470fff], got write-back [ 1418.078570][T30439] x86/PAT: syz-executor.5:30439 map pfn RAM range req write-combining for [mem 0x39480000-0x39480fff], got write-back [ 1418.146149][T30432] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:44:32 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x2810, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000001c0)={{0x4fb164400647df63, @empty, 0x4e22, 0x0, 'rr\x00', 0x2, 0x7fff, 0x5}, {@rand_addr=0x7fff, 0x4e21, 0x0, 0xb8, 0x9, 0x7fff}}, 0x44) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r2 = epoll_create1(0x0) r3 = getpgrp(0xffffffffffffffff) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, r2, &(0x7f0000000000)) r5 = syz_open_procfs(r4, &(0x7f0000000000)='net/if_inet6\x00') getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f00000000c0)=""/122, &(0x7f0000000140)=0x7a) [ 1418.244135][T30432] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) 18:44:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r1, 0x0, 0x0) [ 1418.301907][T30432] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1418.355296][T30432] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:33 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x80, 0x4, 0x3}}, 0x14) 18:44:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r2, 0x0, 0x0) [ 1418.631878][T30464] x86/PAT: syz-executor.2:30464 map pfn RAM range req write-combining for [mem 0x394b0000-0x394b0fff], got write-back [ 1418.730823][T30467] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:44:33 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1418.778083][T30467] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1418.795667][T30464] x86/PAT: syz-executor.2:30464 map pfn RAM range req write-combining for [mem 0x394c0000-0x394c0fff], got write-back 18:44:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r4) mount$9p_virtio(&(0x7f0000000080)='/dev/ion\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x200402, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=virtio,noextend,access=user,version=9p2000.L,nodevmap,uname=-/!nodeveth1&em0wlan0,posixacl,func=PATH_CHECK,fowner>', @ANYRESDEC=r2, @ANYBLOB="08a869b5a34e0a5b7ac5d2e3e6c703000000000000", @ANYRESDEC=r4, @ANYBLOB="c31f04005f726f90d63d2c5363723d30b03030303030bd593f123066303030303034382c61756469742c646f6e745f61707072616973652c00"]) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x8000, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f00000003c0)={0x40, 0x9, 0x1}, 0xc) lseek(r1, 0x0, 0x0) 18:44:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r2, 0x0, 0x0) [ 1418.832310][T30467] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1418.868558][T30467] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1419.021901][T30467] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1419.040732][T30467] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400000, 0x0) fchdir(r0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x144) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x1, 0x6, 0x0, 0x9, 0x6, 0x80, 0xfb, 0x8f, 0x5, 0x3, 0x4}, 0xb) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f00000001c0)=""/113, 0x71) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140)={r3, 0x7, 0x85}, &(0x7f0000000240)={'enc=', 'raw', ' hash=', {'hmac(sha224-avx2)\x00'}}, &(0x7f00000002c0)="54c249f75aa91e", &(0x7f0000000300)=""/133) write$capi20_data(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="100001008780000004000000000000001600f1cc47ea522c5962b1a5846e87e8d3c578efb498275d21c17db1c7567c7d25e6780d8a3a0060489929bfd759bcab95b833a9739c64b62ef0005321c65818e02113570819a7a4939a22d4ff224fdcc2e8eb408915db9664cc09568821e05acc46a2b16d5667256f06236083512f7c690ff0c491e8d52b00"/151], 0x28) 18:44:33 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@hyper}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r2, 0x0, 0x0) [ 1419.083486][T30467] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r2, 0x0, 0x0) [ 1419.165175][T30467] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:33 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000100)={0xa5, 0x80000000, 0x1, 0xfff, 0xee6, 0xffffff3e}) [ 1419.225305][T30489] encrypted_key: insufficient parameters specified [ 1419.264104][T30495] encrypted_key: insufficient parameters specified 18:44:34 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:34 executing program 2: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) dup(r0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) 18:44:34 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r0, 0x0, 0x0) 18:44:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r2, 0x0, 0x0) [ 1419.590270][T30507] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1419.635152][T30508] input: syz1 as /devices/virtual/input/input1325 [ 1419.655172][T30507] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1419.703791][T30507] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:34 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x100, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0xa, "0000010000001500080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff22163ee340b7679500800000000000000101013c5a11039e15773827ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400003d05c6c60006ad8e5ecc321d0c09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socket$tipc(0x1e, 0x8191406eb7f45a65, 0x0) ustat(0x3, &(0x7f0000000100)) bind$rose(r1, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r2, 0x0, 0x0) 18:44:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) r5 = dup3(r0, r4, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r5, &(0x7f0000000140)="4e0487cd0f0f280168a8186ebec50c89d0394efc49e15142aefad700ef747f605e9241ced5515b32b7c867340839cd149c60eb5ba7b91be85e59b6c95a9317863e8a7e79ea430919cbd6559ed8e8190a21c363c7faa3cf2ddea277df7d1633a30696b0e4bccf26652f4207668dc4af80c5fc62b469b17f05ef5ed38b", &(0x7f00000001c0)=""/66, 0x4}, 0x20) [ 1419.772937][T30507] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:34 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x2115, 0x20401) ioctl$KDDISABIO(r1, 0x4b37) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x10000, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) 18:44:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r2, 0x0, 0x0) [ 1419.840582][T30507] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1419.917681][T30507] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1419.937993][T30507] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1419.991654][T30507] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:34 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:34 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) readahead(r1, 0x7fffffff, 0x1) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f00000001c0)=""/113, 0x71) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r4) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r4, r5) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa927, 0xbb1011787308b61d, 0x1, 0xffffffffffffffff}) lseek(r6, 0x0, 0x0) 18:44:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r2, 0x0, 0x0) 18:44:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r8, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r8, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x48080000}) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r12 = dup(r11) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r12, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x40000, r12}) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f00000000c0)={r9, r13, 0xfffffffffffffffa}) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r14, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r14, 0x5501, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) 18:44:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r3, r4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1420.302210][T30552] input: syz1 as /devices/virtual/input/input1326 [ 1420.326927][T30545] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1420.350096][T30552] encrypted_key: insufficient parameters specified [ 1420.361918][T30549] x86/PAT: syz-executor.4:30549 map pfn RAM range req write-combining for [mem 0x39530000-0x39530fff], got write-back [ 1420.392180][T30545] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1420.426490][T30545] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1420.478690][T30559] encrypted_key: insufficient parameters specified [ 1420.485739][T30545] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1420.506529][T30549] x86/PAT: syz-executor.4:30549 map pfn RAM range req write-combining for [mem 0x39d60000-0x39d60fff], got write-back 18:44:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r2, 0x0, 0x0) 18:44:35 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x108, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x400}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}]}, 0x40}}, 0x8000) [ 1420.561766][T30549] x86/PAT: syz-executor.4:30549 map pfn RAM range req write-combining for [mem 0x48500000-0x48500fff], got write-back [ 1420.583130][T30549] input: syz1 as /devices/virtual/input/input1327 18:44:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x8]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r8, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000140)="240000001a0003041dfffd946f6105000a00000a1f000003006708000800020004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r9 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r9, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000100)={0x1, 0x3d, 0x1}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000200), 0x4) accept(0xffffffffffffffff, &(0x7f0000000140)=@caif, &(0x7f00000001c0)=0x80) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r10, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x45c) ioctl$UI_SET_EVBIT(r10, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r10, 0x5501, 0x0) r11 = dup(r10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r11, 0x0) ioctl$SG_SET_RESERVED_SIZE(r11, 0x2275, &(0x7f0000000000)=0x7ff) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') [ 1420.622969][T30545] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1420.693579][T30545] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1420.762117][T30545] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x7ff, 0x6, 0x4, 0x4000000, {0x0, 0x2710}, {0x5, 0x1, 0x1f, 0x6, 0x81, 0x4, "485e6bf7"}, 0x2, 0x1, @fd=r5, 0x4}) r7 = epoll_create1(0x0) r8 = getpgrp(0xffffffffffffffff) r9 = getpid() kcmp$KCMP_EPOLL_TFD(r9, r8, 0x7, r7, &(0x7f0000000000)) fcntl$setownex(r6, 0xf, &(0x7f00000000c0)={0x2, r9}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r10 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r10, 0x4, 0x2000) [ 1420.822803][T30576] input: syz1 as /devices/virtual/input/input1329 [ 1420.833077][T30545] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1420.899870][T30576] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:44:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r2, 0x0, 0x0) 18:44:35 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:35 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0xbc891f6e6e3ba5d4) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r6, 0x3b, "165c20", "484c7fad4d420bb366f4f57822fa3e7ba084acc42a71f675a677ab3574f853bb63ec11b08d39fa43fbd26f0708b190e9c03dd2c8ac0df3c508a22d6ea927e7bbaadef0715ecdd98558f6bc05ae7ff87e83a66fd5ccdd0530c37daf9e36e140174f7892ea23d846ccebcecde90370884fcd1fc5138077ab1f079d8ca01d65178240b5d1f6168d4c0c5e049472f6f4fe745d765df96aa2c9fc7205eebf51a6005263d9580f05de209a4377321f20a7a1321d02e1ee5bcebcb2f399caa4c21a484a8def96e0eaa727d05ac13ad49fb7dc02567d7e65d3610fd01b16097312807c31686888f32f8865241bf9f4c8ca99215a3c8d3aac35269058b6b65cf149430d97"}}, 0x110) [ 1420.991191][T30584] x86/PAT: syz-executor.2:30584 map pfn RAM range req write-combining for [mem 0x39540000-0x39540fff], got write-back 18:44:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4400, 0xe795ace8128a3435) fsetxattr$security_smack_entry(r3, &(0x7f0000000340)='security.SMACK64\x00', &(0x7f0000000380)=':lo-\x00', 0x5, 0x0) r4 = dup2(0xffffffffffffffff, r2) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5f}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$int_out(r2, 0xfca0, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x4, @remote, 0x8}, @in={0x2, 0x4e21, @remote}], 0x3c) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r5) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) write$P9_RWRITE(r4, &(0x7f00000002c0)={0xb, 0x77, 0x1, 0x1}, 0xb) sendto$inet(r7, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r7, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000280)={0xa925, 0x29, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r10, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r10, 0x8108551b, &(0x7f0000000140)={0x800, 0x2, "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"}) [ 1421.034516][T30588] x86/PAT: syz-executor.4:30588 map pfn RAM range req write-combining for [mem 0x39550000-0x39550fff], got write-back [ 1421.111874][T30584] input: syz1 as /devices/virtual/input/input1330 [ 1421.128365][T30596] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1421.178821][T30596] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1421.179316][T30602] x86/PAT: syz-executor.5:30602 map pfn RAM range req write-combining for [mem 0x39570000-0x39570fff], got write-back [ 1421.218307][T30596] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1421.237727][T30596] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r2, 0x0, 0x0) [ 1421.302478][T30602] x86/PAT: syz-executor.5:30602 map pfn RAM range req write-combining for [mem 0x66a10000-0x66a10fff], got write-back 18:44:36 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x0) [ 1421.381455][T30596] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1421.425748][T30596] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1421.460560][T30596] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1421.516027][T30596] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:36 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) 18:44:36 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='\x8e\xf4\xd4\xe41qD{X', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x0) 18:44:36 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1421.751871][T30595] x86/PAT: syz-executor.4:30595 map pfn RAM range req write-combining for [mem 0x66a40000-0x66a40fff], got write-back 18:44:36 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = socket$isdn(0x22, 0x3, 0x22) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x40, 0x0) accept$inet(r3, 0x0, &(0x7f0000000180)) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000100)={'hwsim0\x00', 0x40}) lseek(r1, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x1000) ioctl$KDGETLED(r3, 0x4b31, &(0x7f00000001c0)) write$P9_RLCREATE(r4, &(0x7f00000000c0)={0x18, 0xf, 0x2, {{0x40, 0x1, 0x4}, 0x7}}, 0x18) [ 1421.894784][T30629] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1421.916228][T30629] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1421.943299][T30629] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1421.971218][T30629] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1422.074167][T30629] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:44:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x221b2cbb18219f2a, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x220100, 0x27e59ef3896dcb60) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x0) r8 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x80000) bind$xdp(r4, &(0x7f00000000c0)={0x2c, 0x1, r7, 0x30, r8}, 0x10) 18:44:36 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) 18:44:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1422.115574][T30629] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000180)={0x101, 0x2, {0x1, 0x3, 0x8000, 0x3, 0x4a2}}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) pread64(r1, &(0x7f00000000c0)=""/148, 0x94, 0x0) r3 = semget(0x1, 0x4, 0x0) semctl$SEM_STAT(r3, 0x2, 0x12, &(0x7f0000000200)=""/131) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1422.164913][T30629] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:36 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f0000000000)={0x0, {0x101, 0x8}}) [ 1422.228031][T30629] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000040)=0x7, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) [ 1422.319672][T30652] input: syz1 as /devices/virtual/input/input1333 18:44:37 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\xf2', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:37 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) accept(r3, 0x0, 0x0) 18:44:37 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x90d00, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000280)=0x8, &(0x7f00000002c0)=0x4) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r3, @ANYBLOB="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"/300], 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) [ 1422.495386][T30662] x86/PAT: syz-executor.5:30662 map pfn RAM range req write-combining for [mem 0x39580000-0x39580fff], got write-back 18:44:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='\x00??l\x00', 0x70000, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) [ 1422.619212][T30672] x86/PAT: syz-executor.5:30672 map pfn RAM range req write-combining for [mem 0x395a0000-0x395a0fff], got write-back 18:44:37 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='\x01\x80P\x88/ion\x00', 0x141001, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x38, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r2, &(0x7f00000000c0)="3b2f95087bcc0f248b8c77eb68a3180c97ff02c790fd7e2d2900d6009aa0b053a68303807a057f07a2145bc3dbb88daf0d3237bb15bce7fbc18a86d8f4fd33d402e35758556b287ff57d83dc0235d79df808540625028da09867a4028ed36127acda1f00fc5f937ec1a9eee1c5913e67c833c539435ad09c769358275bc193e7f2134bec2985021b879e3a4b3c3f5836b069ed3a963b", 0x96, 0x404800b, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) 18:44:37 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$caif_seqpacket(0x25, 0x5, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) 18:44:37 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x0, 0x400, 0x3, 0x7, 0x2}) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3b) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) 18:44:37 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0xe) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:44:37 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = msgget$private(0x0, 0x5d16dc7cf3c00ba4) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/33) msgsnd(r1, &(0x7f0000000140)={0x3, "e31a42dbebd7e22a924c66e03dcdccc605c7ec"}, 0x1b, 0x1c00) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes256, 0x3, [], "8b4dc426327bffc117a50faaeaec648f"}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) ioctl$KDSKBMODE(r6, 0x4b45, &(0x7f0000000180)=0x2) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$uinput_user_dev(r3, &(0x7f0000000880)={'syz1\x00', {0x8b9, 0x8, 0x0, 0x5}, 0x12, [0x6, 0x1f, 0xe4e, 0x401, 0x6, 0x1, 0x76ae, 0x1, 0x6, 0x40, 0x4, 0xfffffffd, 0x5, 0xfffffff7, 0x0, 0xff, 0x54, 0x7, 0x2, 0x81, 0x3, 0x96b6, 0x4, 0xfffffff8, 0x8, 0x917, 0x9, 0xfffffffb, 0x3, 0x4f, 0x1, 0x2, 0xc99f, 0x3f, 0xff, 0x9, 0x8, 0xed8, 0x9eb, 0x81, 0x401, 0x4, 0xff, 0x1f, 0x8, 0x65, 0x200, 0x1, 0x0, 0x0, 0x48b, 0x8, 0x6, 0x3ff, 0x6a6, 0x8, 0x270, 0x0, 0x7, 0x3, 0xffffffff, 0x6, 0x35, 0x401], [0x6, 0x9, 0xfff, 0x3, 0xa2, 0x401, 0xea, 0x9, 0x8, 0x1, 0x8, 0x1ff, 0x7fffffff, 0xcf06, 0x7fff, 0x1, 0x2, 0xb2ae, 0x5, 0x2, 0x3, 0x0, 0x8, 0x7, 0xffffff95, 0x5, 0xffffffff, 0x9, 0xfb2, 0x28b, 0xc72, 0x100, 0x20, 0x521, 0x8, 0x1ff, 0x1, 0xfffffffc, 0x7, 0x0, 0x5, 0x5, 0x80000001, 0x9, 0xee5, 0x6, 0x7, 0x3, 0x6, 0x7, 0x81, 0x1, 0x6, 0xfe, 0x80, 0x54, 0xfff, 0x1d6e2e6d, 0x2, 0x5, 0xda, 0x10000, 0xcdf, 0x1], [0x9, 0x80000000, 0x8, 0x3, 0x9, 0x8, 0x5, 0x3, 0x100, 0x3f, 0x0, 0x5, 0x10001, 0xfc, 0xf9, 0x4, 0x4, 0x0, 0x2, 0x80000000, 0x3af, 0x40, 0x80, 0x4040000, 0x9, 0x3, 0xfffffff9, 0x0, 0x8, 0xa2f, 0x0, 0x80000001, 0x4, 0x0, 0x2, 0x7c6ab5fd, 0x9, 0x5, 0x0, 0x9, 0x8, 0x6, 0x3, 0x80, 0x401, 0x3b, 0x8, 0x4, 0x1, 0x7, 0x1957, 0xfffffff9, 0x1, 0x60, 0xfffffff7, 0x5, 0xfffffff9, 0x1, 0x9, 0x4, 0x10001, 0xe0000000, 0x4, 0xffffff47], [0x7ff, 0xffff, 0x800, 0x200, 0x1c7, 0x6, 0x7, 0x8, 0x400, 0xcb, 0x9, 0x4, 0xfffffc00, 0x9, 0x1, 0xd37, 0x1, 0x5, 0x3ff, 0x2, 0x5, 0x9a, 0x47e000, 0xfffffff8, 0x0, 0x6, 0x0, 0x208, 0x38, 0x3f, 0x9, 0x19, 0x1f, 0x2, 0x0, 0xa, 0x1, 0x101, 0xff, 0x80000000, 0x9, 0x7f, 0x800, 0x5, 0xffffffff, 0x1, 0x5, 0x4, 0x40, 0x4, 0x401, 0xffffffff, 0x9, 0x4, 0x6742cd96, 0x9, 0xfffffffc, 0xffc, 0x7, 0x3, 0x7, 0x3]}, 0x45c) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0xfffffffffffffffe, 0x5}) 18:44:37 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$caif_seqpacket(0x25, 0x5, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) [ 1423.121540][T30699] input: syz1 as /devices/virtual/input/input1334 [ 1423.203486][T30703] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1423.305335][T30703] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1423.329046][T30709] input: syz1 as /devices/virtual/input/input1335 [ 1423.355703][T30703] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1423.385145][T30703] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1423.388864][T30716] x86/PAT: syz-executor.2:30716 map pfn RAM range req write-combining for [mem 0x66b10000-0x66b10fff], got write-back 18:44:38 executing program 4: socketpair$unix(0x1, 0x79962082cc3183d4, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x4000, 0x0) getitimer(0x3, &(0x7f0000000080)) fcntl$setstatus(r3, 0x4, 0x2000) r4 = socket(0x11, 0x800000003, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1800, 0x5) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 18:44:38 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$caif_seqpacket(0x25, 0x5, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) [ 1423.565289][T30709] input: syz1 as /devices/virtual/input/input1336 [ 1423.611403][T30703] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1423.635198][T30703] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x80c, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x24) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_OIF={0x8, 0x4, r7}]}, 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@mpls_getnetconf={0x2c, 0x52, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1f}, @NETCONFA_IFINDEX={0x8, 0x1, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x2, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) fcntl$setstatus(r3, 0x4, 0x2000) [ 1423.669596][T30703] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1423.688475][T30703] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:38 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1423.796419][T30716] input: syz1 as /devices/virtual/input/input1337 18:44:38 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4400, 0xe795ace8128a3435) fsetxattr$security_smack_entry(r3, &(0x7f0000000340)='security.SMACK64\x00', &(0x7f0000000380)=':lo-\x00', 0x5, 0x0) r4 = dup2(0xffffffffffffffff, r2) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5f}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$int_out(r2, 0xfca0, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x4, @remote, 0x8}, @in={0x2, 0x4e21, @remote}], 0x3c) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r5) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) write$P9_RWRITE(r4, &(0x7f00000002c0)={0xb, 0x77, 0x1, 0x1}, 0xb) sendto$inet(r7, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r7, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000280)={0xa925, 0x29, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r10, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r10, 0x8108551b, &(0x7f0000000140)={0x800, 0x2, "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"}) [ 1423.868939][T30709] x86/PAT: syz-executor.2:30709 map pfn RAM range req write-combining for [mem 0x395b0000-0x395b0fff], got write-back [ 1423.958654][T30731] input: syz1 as /devices/virtual/input/input1338 18:44:38 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xfff) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_OIF={0x8, 0x4, r6}]}, 0x24}}, 0x0) bind$packet(r3, &(0x7f0000000040)={0x11, 0x8, r6, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) [ 1424.129655][T30744] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1424.196592][T30740] input: syz1 as /devices/virtual/input/input1339 [ 1424.203827][T30744] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1424.242993][T30744] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1424.261635][T30749] input: syz1 as /devices/virtual/input/input1340 18:44:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x424200, 0x0) getdents(r4, &(0x7f0000000140)=""/176, 0xb0) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:44:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000000)=0x54) [ 1424.319357][T30744] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1424.440758][T30744] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1424.475780][T30744] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1424.494035][T30756] input: syz1 as /devices/virtual/input/input1341 [ 1424.514505][T30752] x86/PAT: syz-executor.3:30752 map pfn RAM range req write-combining for [mem 0x55839000-0x55839fff], got write-back [ 1424.525826][T30744] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x5, 0x1) accept4$nfc_llcp(r1, 0x0, &(0x7f0000000000), 0x80000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1424.585742][T30744] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) 18:44:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r3 = getpid() process_vm_readv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/232, 0xe8}], 0x1, &(0x7f0000001480)=[{&(0x7f0000000200)=""/152, 0x98}, {&(0x7f00000002c0)=""/139, 0x8b}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/35, 0x23}, {&(0x7f0000001400)=""/102, 0x66}], 0x6, 0x0) r4 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000380)={0x0, 0x4}) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f0000000000)={0x7, 0x1, 0x6, 0x5, 0x10, 0xff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) 18:44:39 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1424.992478][T30779] x86/PAT: syz-executor.2:30779 map pfn RAM range req write-combining for [mem 0x395c0000-0x395c0fff], got write-back 18:44:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x8]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r8, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000140)="240000001a0003041dfffd946f6105000a00000a1f000003006708000800020004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r9 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r9, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000100)={0x1, 0x3d, 0x1}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000200), 0x4) accept(0xffffffffffffffff, &(0x7f0000000140)=@caif, &(0x7f00000001c0)=0x80) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r10, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x45c) ioctl$UI_SET_EVBIT(r10, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r10, 0x5501, 0x0) r11 = dup(r10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r11, 0x0) ioctl$SG_SET_RESERVED_SIZE(r11, 0x2275, &(0x7f0000000000)=0x7ff) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') 18:44:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write(r2, &(0x7f0000000040)="c8ca8a3bfca0055d494f32c9a28057128dc104a8b0cdb78c0b47e14b1824b29062ecff0414715299bfb850b6a9f66e5961f4db51708e9e326e66a12b6e0bf651be5f739f00981abad763ed041d5582198d5e2b26262d70a12672a18449", 0x5d) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) [ 1425.216903][T30785] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1425.298302][T30790] input: syz1 as /devices/virtual/input/input1342 [ 1425.365634][T30785] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1425.385959][T30795] input: syz1 as /devices/virtual/input/input1343 [ 1425.480472][T30785] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1425.531045][T30795] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1425.574503][T30785] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1425.593303][T30790] input: syz1 as /devices/virtual/input/input1344 [ 1425.599362][T30804] x86/PAT: syz-executor.3:30804 map pfn RAM range req write-combining for [mem 0x395e0000-0x395e0fff], got write-back [ 1425.733854][T30785] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1425.784337][T30785] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1425.815514][T30785] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x1, r3}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r5 = epoll_create1(0x0) getpgrp(0xffffffffffffffff) r6 = getpid() kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xb1a2}) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r9, 0x0) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r3) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r12 = dup(r11) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r12, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0xff, 0x1, 0x4, 0x5, 0x0, 0x61c8314d, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1404585b, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x5e, 0xfffffff9, 0x4, 0xd27, 0x401, 0x9}, r6, 0xc, r12, 0x1) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) 18:44:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) prctl$PR_SVE_GET_VL(0x33, 0x10e83) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1425.829078][T30804] input: syz1 as /devices/virtual/input/input1345 [ 1425.844394][T30785] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1425.904315][T30811] x86/PAT: syz-executor.2:30811 map pfn RAM range req write-combining for [mem 0x39600000-0x39600fff], got write-back 18:44:40 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1425.988892][T30811] x86/PAT: syz-executor.2:30811 map pfn RAM range req write-combining for [mem 0x39610000-0x39610fff], got write-back [ 1426.104124][T30811] x86/PAT: syz-executor.2:30811 map pfn RAM range req write-combining for [mem 0x39620000-0x39620fff], got write-back [ 1426.159014][T30818] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1426.171816][T30818] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1426.182112][T30818] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1426.197721][T30818] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:40 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:41 executing program 2: arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8000) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f00000000c0)={{0x81}, {0x7, 0x4}, 0x3ff, 0x4, 0x7f}) unshare(0x20100) [ 1426.447257][T30825] x86/PAT: syz-executor.2:30825 map pfn RAM range req write-combining for [mem 0x39650000-0x39650fff], got write-back [ 1426.524913][T30826] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1426.563510][T30826] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1426.612649][T30826] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:41 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {0x1, 0x1}, [{0x2, 0x2, 0xee00}, {0x2, 0x0, r1}], {0x4, 0x1}, [{0x8, 0x0, r2}], {}, {0x20, 0x2}}, 0x3c, 0x1) [ 1426.685603][T30826] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1426.826461][T30826] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:44:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write(r2, &(0x7f0000000040)="c8ca8a3bfca0055d494f32c9a28057128dc104a8b0cdb78c0b47e14b1824b29062ecff0414715299bfb850b6a9f66e5961f4db51708e9e326e66a12b6e0bf651be5f739f00981abad763ed041d5582198d5e2b26262d70a12672a18449", 0x5d) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) [ 1426.871682][T30826] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_TYPE={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000000)={0x5, 0x0, 0x401, 0x3, 0x3ff}) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={r6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r6, 0x8, 0x8}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={r7, 0xfffffffa, 0x20}, 0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r8 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x2000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) ioctl$SIOCAX25GETUID(r8, 0x89e0, &(0x7f0000000480)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r9}) [ 1426.955297][T30826] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1427.014760][T30826] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:41 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1427.100198][T30845] input: syz1 as /devices/virtual/input/input1346 18:44:41 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1427.178373][T30853] x86/PAT: syz-executor.2:30853 map pfn RAM range req write-combining for [mem 0x39660000-0x39660fff], got write-back 18:44:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xdf6dc82091cfcf37}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x6c, r3, 0x3062bce0307c41b7, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff04f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="0949791a148e37b752eab9307ed0bc92"}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 18:44:41 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f000025c000)={0x4, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x48298, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0xfffffc7e, 0x40487fe, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0xffffffffffffffcd) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1427.266822][T30854] x86/PAT: syz-executor.2:30854 map pfn RAM range req write-combining for [mem 0x39670000-0x39670fff], got write-back [ 1427.398474][T30862] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1427.445325][T30862] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/durandnm\x00\x02\x00', 0x100, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) [ 1427.486703][T30862] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x20, 0x1}) [ 1427.575170][T30862] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1427.712671][T30862] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1427.760294][T30862] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x1000000000a927, 0x8}) [ 1427.836889][T30862] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x988b7f571e66cb30, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000200)={{0x2, 0xff}, 'port1\x00', 0x51, 0x10000, 0x3, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x3}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000002c0)=0x2) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f00000001c0)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="01e200009c97b2aad83946fef94219ea70a42a74c2ed1414bd2f0ecff0e2b59485169453e6b2b390b5a589ca9ddc7ae0fe38455c2cd32f8c73a41ac45320fe54b3a251d789b8b1ba2a02449e890904ce4c", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={r9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000140)={r9, 0xa, "1336862e6bfa863763f0"}, &(0x7f0000000180)=0x12) lseek(r1, 0x0, 0x0) [ 1427.910343][T30862] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}, 0x45c) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000100)={0x73, @multicast2, 0x4e21, 0x4, 'ovf\x00', 0x4, 0xfffffffc, 0x78}, 0x2c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) write$FUSE_LSEEK(r2, &(0x7f0000000180)={0x18, 0x0, 0x3, {0x3}}, 0x18) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = fcntl$dupfd(r0, 0x406, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r8, 0x4, 0x2000) 18:44:42 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0x7, 0xfffffffa, "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", 0x53, 0x1, 0x3, 0x6, 0xff, 0x2, 0x51}, r3}}, 0x120) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000280)={0x40, 0x55}) [ 1428.055385][T30885] input: syz1 as /devices/virtual/input/input1347 [ 1428.071188][T30886] x86/PAT: syz-executor.3:30886 map pfn RAM range req write-combining for [mem 0x39680000-0x39680fff], got write-back [ 1428.110458][T30887] x86/PAT: syz-executor.4:30887 map pfn RAM range req write-combining for [mem 0x39690000-0x39690fff], got write-back [ 1428.193410][T30891] x86/PAT: syz-executor.2:30891 map pfn RAM range req write-combining for [mem 0x396a0000-0x396a0fff], got write-back 18:44:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x988b7f571e66cb30, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000200)={{0x2, 0xff}, 'port1\x00', 0x51, 0x10000, 0x3, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x3}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000002c0)=0x2) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f00000001c0)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="01e200009c97b2aad83946fef94219ea70a42a74c2ed1414bd2f0ecff0e2b59485169453e6b2b390b5a589ca9ddc7ae0fe38455c2cd32f8c73a41ac45320fe54b3a251d789b8b1ba2a02449e890904ce4c", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={r9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000140)={r9, 0xa, "1336862e6bfa863763f0"}, &(0x7f0000000180)=0x12) lseek(r1, 0x0, 0x0) [ 1428.293020][T30894] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1428.315996][T30894] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1428.345372][T30894] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x0) fsmount(r4, 0x1, 0x80) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000100)={0x7, 0xffffffffffffff41, 0x6}) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) [ 1428.405425][T30894] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4000000000000006) bind$ax25(r2, &(0x7f0000000040)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) [ 1428.508824][T30894] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1428.552483][T30894] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1428.569240][T30905] x86/PAT: syz-executor.3:30905 map pfn RAM range req write-combining for [mem 0x396e0000-0x396e0fff], got write-back [ 1428.582459][T30909] x86/PAT: syz-executor.2:30909 map pfn RAM range req write-combining for [mem 0x396f0000-0x396f0fff], got write-back [ 1428.595578][T30894] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1428.635098][T30894] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1428.667242][T30909] input: syz1 as /devices/virtual/input/input1349 18:44:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x2) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000180)={[{0x0, 0x7, 0x49, 0xb, 0x7, 0xc, 0x0, 0x1, 0x1, 0x1, 0xc5, 0x2, 0x8000}, {0x8, 0x8000, 0x1, 0x3, 0x81, 0x1, 0x1, 0x2, 0xff, 0x4, 0x8, 0x3f, 0x6}, {0x80000001, 0x7, 0x4, 0x6, 0x76, 0x62, 0x4, 0x81, 0x7f, 0x1, 0x43, 0x0, 0x6}], 0x4}) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x9, 0x0, 0x1, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r7, 0x0) ioctl$TIOCEXCL(r7, 0x540c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r8 = fcntl$dupfd(r3, 0x406, r7) getsockopt$netlink(r8, 0x10e, 0x8, &(0x7f0000000200)=""/149, &(0x7f0000000100)=0x95) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r9, 0x4, 0x2000) 18:44:43 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x988b7f571e66cb30, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000200)={{0x2, 0xff}, 'port1\x00', 0x51, 0x10000, 0x3, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x3}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000002c0)=0x2) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f00000001c0)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="01e200009c97b2aad83946fef94219ea70a42a74c2ed1414bd2f0ecff0e2b59485169453e6b2b390b5a589ca9ddc7ae0fe38455c2cd32f8c73a41ac45320fe54b3a251d789b8b1ba2a02449e890904ce4c", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={r9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000140)={r9, 0xa, "1336862e6bfa863763f0"}, &(0x7f0000000180)=0x12) lseek(r1, 0x0, 0x0) [ 1428.995556][T30926] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1429.019289][T30926] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1429.049685][T30926] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x1}) [ 1429.092298][T30926] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1429.111091][T30929] x86/PAT: syz-executor.3:30929 map pfn RAM range req write-combining for [mem 0x39740000-0x39740fff], got write-back [ 1429.226428][T30926] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1429.244276][T30926] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0xf0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r3, 0x4f) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r7, 0x415, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x0) r8 = epoll_create1(0x0) r9 = getpgrp(0xffffffffffffffff) r10 = getpid() kcmp$KCMP_EPOLL_TFD(r10, r9, 0x7, r8, &(0x7f0000000000)) sched_getparam(r9, &(0x7f00000001c0)) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r7, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000) fcntl$setstatus(r4, 0x4, 0x2000) [ 1429.278880][T30926] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1429.302155][T30926] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:44 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x988b7f571e66cb30, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x2, 0xff}, 'port1\x00', 0x51, 0x10000, 0x3, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x3}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000002c0)=0x2) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f00000001c0)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="01e200009c97b2aad83946fef94219ea70a42a74c2ed1414bd2f0ecff0e2b59485169453e6b2b390b5a589ca9ddc7ae0fe38455c2cd32f8c73a41ac45320fe54b3a251d789b8b1ba2a02449e890904ce4c", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={r8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000140)={r8, 0xa, "1336862e6bfa863763f0"}, &(0x7f0000000180)=0x12) 18:44:44 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x20a825, 0x8, 0x1, r1}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x20, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) dup(r8) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x30051, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x530180, 0x0) clone(0x280c00, &(0x7f0000000140)="2191103470d060b8b56b9c3f7a36482a628f2f621c6ccee1f1b386bcc7af9aaa5430549d1d15c5b11ff2df16d720e8021d35f024c7c14d3a9ef08252d92d3ff2fd53f8052932ee70e642e2a5fdd1b27fce76d1e0ca3bd2b7ac223566ebd1d4fae32939f907a50db23b24685d943f146d30f0f014930b95a7d8ad57f2c61a0696045dc2c59468514663c6c1d1d0e349415e684b34ee6b5aa0525bc27bc2d7b6f8997b1bd077b9e2b8f48cc6edccb133da1f82165db7", &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="732c8e49d6d0c96066fb569be62431a128e1c9516bf92e743827f9be168ccd4ac571ede6c5860f94fb1d90de6ad5aced7e23417009452fd4dfd165e063ac8d0e1194ac9f3442df5092b44141e25fb0ca2aca6f167c79ed9617ecde1e046a909f58a9e44ec76f1371c85d8224f2991981a21eedae35703509e739256c10bcc79935ad965975900241709408fba9be19ecfc6d01d06bfa6ecb414136325aa07f265f21d1842c") r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/io.\x00', 0x5785c0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000440)={0xf71, 0x3, 0x40, 0x1f, 0x1a, 0xa1, 0x4, 0xa1, 0xfffff4ea, 0xffffffff, 0x6, 0x400}) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r11 = dup(r10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r11, 0x0) openat$cgroup_subtree(r3, &(0x7f00000003c0)='cgroup.subtree_control\x00', 0x2, 0x0) r12 = socket(0x22, 0x2, 0x4) ioctl$IMGETVERSION(r12, 0x80044942, &(0x7f0000000000)) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x2, 0x0) r14 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r14, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000400)=@req={0x9, 0x7, 0x70f3bcd5, 0x2}, 0x10) ioctl$ION_IOC_ALLOC(r14, 0xc0184900, &(0x7f00000000c0)={0x40027, 0x1b, 0x0, r13}) 18:44:44 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:44 executing program 4: socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) [ 1429.507169][T30945] x86/PAT: syz-executor.2:30945 map pfn RAM range req write-combining for [mem 0x39750000-0x39750fff], got write-back [ 1429.538676][T30946] x86/PAT: syz-executor.3:30946 map pfn RAM range req write-combining for [mem 0x39770000-0x39770fff], got write-back [ 1429.680139][T30951] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1429.708192][T30945] x86/PAT: syz-executor.2:30945 map pfn RAM range req write-combining for [mem 0x397a0000-0x397a0fff], got write-back 18:44:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20000, 0x0) [ 1429.728904][T30951] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:44 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x988b7f571e66cb30, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x2, 0xff}, 'port1\x00', 0x51, 0x10000, 0x3, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x3}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000002c0)=0x2) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f00000001c0)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="01e200009c97b2aad83946fef94219ea70a42a74c2ed1414bd2f0ecff0e2b59485169453e6b2b390b5a589ca9ddc7ae0fe38455c2cd32f8c73a41ac45320fe54b3a251d789b8b1ba2a02449e890904ce4c", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={r8}, &(0x7f0000000100)=0x8) [ 1429.778104][T30951] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1429.829673][T30951] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:44 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1, 0x5}) [ 1429.892254][T30961] x86/PAT: syz-executor.3:30961 map pfn RAM range req write-combining for [mem 0x3ac50000-0x3ac50fff], got write-back [ 1429.962753][T30951] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1429.985236][T30951] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1430.018813][T30951] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:44 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x988b7f571e66cb30, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x2, 0xff}, 'port1\x00', 0x51, 0x10000, 0x3, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x3}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000002c0)=0x2) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="01e200009c97b2aad83946fef94219ea70a42a74c2ed1414bd2f0ecff0e2b59485169453e6b2b390b5a589ca9ddc7ae0fe38455c2cd32f8c73a41ac45320fe54b3a251d789b8b1ba2a02449e890904ce4c", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) [ 1430.085212][T30951] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x8, 0x7f, 0x6, 0x10001, 0xfffff000}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="1a0000008ae920d5ed6a936f5320b60dcef9774ca8eac2aac1c9efc28a365f57f7e223"], &(0x7f00000001c0)=0x22) fcntl$setstatus(r3, 0x4, 0x2000) 18:44:44 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x407e0, 0x1}) 18:44:44 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1430.305317][T30977] x86/PAT: syz-executor.3:30977 map pfn RAM range req write-combining for [mem 0x3ac00000-0x3ac00fff], got write-back [ 1430.407952][T30986] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1430.481404][T30986] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:45 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x6a67dfe2c1d5280a) r2 = socket(0x11, 0x800000003, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ion\x00', 0x8000, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) accept4$ax25(r2, &(0x7f0000000380)={{0x3, @rose}, [@null, @rose, @remote, @remote, @null, @rose, @bcast, @bcast]}, &(0x7f0000000400)=0x48, 0x40400) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x124, r4, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8d08}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xa}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffc00}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x30}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40}, 0x4040) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f00000000c0)=0x7fff, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1430.536926][T30986] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:45 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x988b7f571e66cb30, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x2, 0xff}, 'port1\x00', 0x51, 0x10000, 0x3, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x3}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000002c0)=0x2) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) [ 1430.592498][T30986] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$llc(r2, &(0x7f0000000180)="66a195e1a237497e3874acdff56429d00a124700e608da23c5718245b41cd8cc8f09f8ecf402c031af9601c5b31c2a1f3b98da60acd1c5483e9eb415fae81d09f30a91fe889322d5acd9142ab9a4ec16334643d57637143c2f10be08f774b10fd267ca8641b3e3b49483abee4d4b594e61740bd4bafe6b067cfb225ba4b677c6028fbf6a6cdf2ca8f8", 0x89, 0x20001000, 0x0, 0x0) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r6, 0x4, 0x2000) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r7, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15dbf0c7]}, 0x45c) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) close(r7) 18:44:45 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800, 0x1, 0x810fe34ae6f6d868}) [ 1430.673273][T30999] x86/PAT: syz-executor.3:30999 map pfn RAM range req write-combining for [mem 0x3ad20000-0x3ad20fff], got write-back [ 1430.710514][T30986] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1430.752203][T30986] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1430.782557][T31003] x86/PAT: syz-executor.4:31003 map pfn RAM range req write-combining for [mem 0x3ad30000-0x3ad30fff], got write-back [ 1430.800691][T30986] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:45 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x988b7f571e66cb30, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x2, 0xff}, 'port1\x00', 0x51, 0x10000, 0x3, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x3}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000002c0)=0x2) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x1, 0x84) [ 1430.850059][T30986] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1430.935436][T31003] input: syz1 as /devices/virtual/input/input1351 18:44:45 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1431.030459][T31012] x86/PAT: syz-executor.3:31012 map pfn RAM range req write-combining for [mem 0x3ad50000-0x3ad50fff], got write-back 18:44:45 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@rand_addr, @empty, 0x0}, &(0x7f00000001c0)=0xc) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vcs\x00', 0x100, 0x0) readlinkat(r3, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)=""/252, 0xfc) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) recvmmsg(r4, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) sendmmsg(r1, &(0x7f00000011c0)=[{{&(0x7f0000000200)=@hci={0x1f, r2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)="573e93e48912a5daf8b1a046359b18ba0e698e2ea0b2993cbf59931511f6ef54b5a2f8accce83033575760b1b1a62426ac902d0a9a872665115e18b06034b74b2287099646bcb8a379332a19aa386f28409511f76add49f90c3582728e185541eaf2843b79b28f9528fd3d61da9bce5bb3522cf94516dcc8ff41d3c6fb23e896f1aa1d6e05656dd5577cac46bc4e5b6ebb569632d9ad32e335f078c3c3b1ce63fed008aebae95e3958cecf75c786475f9a45415d296e98ad56a1ab9ac0198046ba35824bb45cddbee435fa5a141a3f3ca26a7fdd", 0xd4}, {&(0x7f0000000380)="18b7fde4fbbb86647615c115234c1337ada661ec6ac4475b1e", 0x19}], 0x2}}, {{&(0x7f0000000400)=@rc={0x1f, {0xcb, 0x1, 0x5, 0x6, 0x7, 0x6}, 0x6}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000480)="12a03ccb5935a64258c07a8ffa9936d162a9260a3f84a52483dc71c6520def5b0146fc845df79dc038eec1b02d05c75676c7fb0bafbc1649f98d7508d46dc104e0f286abab1d0caf35f6722422ad86fc46bf52b4278eb0a262764a3909c0eea2156d50c4b568d182e13b9827f51432683bbc59045a54", 0x76}], 0x1}}, {{&(0x7f0000000540)=@pppoe={0x18, 0x0, {0x4, @empty, 'team_slave_1\x00'}}, 0x80, &(0x7f0000000780)=[{&(0x7f00000005c0)="0a39b161da2dc6c8518c7ef4f6f33e9d7151cf0d94cc297ec4183e5b49a30616634f79d76e41323c3c88044bea0f2699d3b73110b418e4e8e14cc56b87f0ba9625c02d85e3597a4a5169332c2d1aad9f69f8fbf5820d4c34eb1e6d4ef2d7e5eddfd7f8c97a0e", 0x66}, {&(0x7f0000000640)="e3590aef6963c71f852d7566239fc1dfe426dec6147001007e1eaedf343950b24a3b36e7de45e37ee11c0339fcaaf45dc35677c768f0278d00c246f924458e220a6c257f075244724a6aaf2b4d661497e4c7d062ed50fad30b335000850d08397b0a41b915ac3b50e88faee47b419c0d", 0x70}, {&(0x7f00000006c0)="6aca865c6e4ba67e906020a054bb9276704696dc1d6961fe39532de2c87073a426e25d80d25b74fbcf09bbaae67cf1aedb02bfbad1e783ab6e0faf39566ae1bfdee977791624e06435910a8a585fe6990f9bd0005b7a2b41d7b014f93760719b3c942c959f3825076731c42aa430a73426de86ed6fd2f311bad4d23e0e0238972afe225c5a5356354e50ddc1fc7165cde8381843164e70a61f1bba0d078963a0c425ebae7c7c", 0xa6}], 0x3, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x3a4}}, {{&(0x7f0000000ac0)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @local}, 0x0, 0x4, 0x0, 0x2}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000b40)="02cee57f900fcfcdf5c98559bc881cd9901f122db2cbad5bb54a59299cfb910c551b205be3e48ce9511ade44d09e6ca901cc10c859f96bb74b4af697e3c24030f9f449dcc893a57f0a19f6c74b1d219f7ca5d894ca3b5739517de9d6b9059d8c202afbae4ebf827ae59834711d467b3c4f37ee1df5da28fe1ae98446d079ba9feb119fb408f99b15caf2c25b9480af7804fd0dac4154b8a31c1ecea978c325b96f7e936f7328a38f18a54dacc66083f6d8c774862f065d435e67cf7d14bb6abdba0641a05c1295348155e32104e3efc39c307a53eb36fdec83e6", 0xda}, {&(0x7f0000000c40)="1b4e1e77c499410a3c05ecad379ba27bef54615bec3c0a061531fe258058a4eb56553a9710c0fa3c9c6851cc695a59abc953aeeb644cce8c4b00d901215887f3a7b1d555a94af70cbaeb36d5e6dc66", 0x4f}, {&(0x7f0000000cc0)="e468ad2e54c1b00e56bbb6560649b4dae5aea98648168c347eb4fb0490801f7157a3fd47f56cdcc65f3c9395bb2a954d361de5dbc94cd5c30686d282e97127c5e9029e2c80c000cfdd09bc52c6bdb08f94d97a57b4e1e7f2ca0cfd0c0d27e036939047cd8a24e0bd14bc9e17bd2c4e2609cb17a0de54bd0edd7d17ed2746603def6da4527ea1b8674a7b61e51242ce49430780", 0x93}, {&(0x7f0000000d80)="68f50b4ec3b9879fad585bc7cde3a931bb4996916e3bd389b22fd1bab5345ca8fc9aa4bb10178bfa172220398d3c0b9f27acc8c80515dd19e00b54d763923d4e9db0b64b87e65687356d323b7af9d948444f1162d563da99ba3d", 0x5a}, {&(0x7f0000000e00)="741df24fb18e4e9731cc8511f46faa4fd037b2355e7276aa42974fdf253398560a07f6723676111a5cefaac7a52add90e3aad17b315b7fa84a6dc861fa7425887cd8043ca9bc29c2ed5244476ede5530128e94fa307950dffc1fe402331b0423fa0f644de920f7e80023652a5a9061ea42b0ae4d9e3e140394efcf67103088da23961dc960c82eb26562da4deea2afa3ac6b19acf6605a67eea72de3ed5e196952a03d23324ce3b0d30258bd0b987bf59d3cc5836710f4d30a8a00594d436d6782eba2cdd0138953c9d054382a34", 0xce}, {&(0x7f0000000f00)="75b0619fb6c389b9904e20d1929fcdfcaf3343b6c46d15b2dc3e9cd6e31c4ceac144ace10e1e1b04fa11f2f327387d1b56ebde79d16745f768bd897dd95183225f53ef3b3575158481e8d3306b344490db74b7220caa124cbd86a341811fd560111c", 0x62}], 0x6, &(0x7f0000001000)=[{0x58, 0x0, 0xa11, "3accfec5da02f6371c0fe6d8725709230416abdd814ae1f9f61cc388a0271f498030065f2d45f57077e79cc93277bbc073a3a5d74eee4ad73f10083ae833583de2cb5339199315"}, {0xb0, 0x2acf532db26fe6a5, 0x6, "5bc36e90f828830b878b6cf940dcb27c32dd515fcef3cdeffd45e913a00d013c08357690b3e752e512d2aa7f23b74d730d00e0326a37eddd8a3af1a6cc60e18cb2a010f51e7a42f64c6fa6b633bf3e1dceb0b1fff18c0f3f36f14b9e689a8d32255227f4aa87e0de636337442a39b730d2d7a2a4a8694dbbf41c264d1135740b3fa219801aed5a388f86e0cb5cee94f7458ca07e990bf46af9714f30"}, {0xa8, 0x0, 0x9, "f818e5b213afaeccdebbe2ddc0467db3323db83477d263974c2fd328b49bb0743e18b54c8f4a58d59365430f4ecff2ee66c71359d7d954a8f3a7b0a1c494d496aa7ff2d3396d2df6e9b4bf333d98127d69ed981d9304d46f3e4bfc83865c7609b5e53caaa7d3cd1c9f525f4916b2d86706d93c9a1a01f37155025c2efc3662010ed112f7554d608a2ef9240959dcbb0d78"}], 0x1b0}}], 0x4, 0x20000000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) io_setup(0x6, &(0x7f0000000000)=0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001340)=""/22, 0x16}], 0x1, &(0x7f00000013c0)=""/183, 0xb7}, 0x50) r6 = eventfd(0x5) io_cancel(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0xfff, r4, &(0x7f00000000c0)="57dfe3deea28a8889289c19be671e2f85580b2b61f5bd4019ffcc89249ab03dc61a3fef5acba227607c91ae148fd5e08736eb945222a00f1fc912cfca55780ff1def9f6a9d9437f6218273b9e4ed00c39d2d0274751565cf74575b90dbfdd7e7d7d13870da6abad38b63b1dc68b375cb9072242e4e8f9cd7ace339940a087ac79036a3225a9a0ba4344c9177b59eb9fd5e4b381518ca5553e456959e52e01f7e7c839813bba48b233cda3ea16d0326fe79bd7985f08d5794b3cbd8e3", 0xbc, 0x0, 0x0, 0x1, r6}, &(0x7f0000001300)) 18:44:45 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x988b7f571e66cb30, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x2, 0xff}, 'port1\x00', 0x51, 0x10000, 0x3, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x3}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000002c0)=0x2) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f00000001c0)) [ 1431.214117][T31018] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1431.275240][T31018] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1431.315213][T31018] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write(r4, &(0x7f0000000040)="b63c73f9b042803356fbf2b57ccd30151d6c892ce353f033438d0a7ba8f078cb34b3db6baf6842ae9532", 0x2a) [ 1431.345808][T31018] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1431.377086][T31027] x86/PAT: syz-executor.3:31027 map pfn RAM range req write-combining for [mem 0x3ad80000-0x3ad80fff], got write-back 18:44:46 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x988b7f571e66cb30, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x2, 0xff}, 'port1\x00', 0x51, 0x10000, 0x3, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x3}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000002c0)=0x2) [ 1431.456635][T31030] input: syz1 as /devices/virtual/input/input1353 [ 1431.487479][T31018] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:44:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) setsockopt$rose(r1, 0x104, 0x1, &(0x7f00000000c0)=0x200, 0x4) [ 1431.563142][T31030] input: syz1 as /devices/virtual/input/input1354 [ 1431.575490][T31018] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1431.653819][T31018] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1431.694820][T31018] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1431.704648][T31040] x86/PAT: syz-executor.3:31040 map pfn RAM range req write-combining for [mem 0x3ad90000-0x3ad90fff], got write-back 18:44:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xcbf, 0x10000) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000100)) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r4 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x4000) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000280)={0x0, 0x62d7, 0x7f, 0x8000}, 0x10) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x2000) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x2d, &(0x7f0000000180)={0x2, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) 18:44:46 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = gettid() r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '/dev/ion\x00'}, {0x20, '/dev/ion\x00'}, {0x20, '/dev/ion\x00'}, {0x20, 'em1cpuset\x1f[.\xe4%'}, {0x20, '/dev/ion\x00'}, {}, {0x20, '/dev/ion\x00'}], 0xa, "a63e13a1ade4077a707ba0d0a626945e0261b1dafef0e3a7"}, 0x65) getpgrp(r1) 18:44:46 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:46 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x988b7f571e66cb30, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x2, 0xff}, 'port1\x00', 0x51, 0x10000, 0x3, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x3}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000002c0)=0x2) [ 1432.027385][T31052] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1432.048826][T31052] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400000000400200) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f0000000280)={0x6d9c, 0x0, 0xfffffff8, 'queue1\x00', 0x5}) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000180)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xfffffffffffffc5f) quotactl(0xffff, &(0x7f0000000040)='./file0\x00', r8, &(0x7f00000000c0)="e26536653010cd8b18635125") r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r9, 0x4, 0x2000) [ 1432.069741][T31052] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1432.089403][T31058] input: syz1 as /devices/virtual/input/input1355 [ 1432.092131][T31052] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:46 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x988b7f571e66cb30, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x2, 0xff}, 'port1\x00', 0x51, 0x10000, 0x3, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x3}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000002c0)=0x2) [ 1432.185858][T31064] x86/PAT: syz-executor.4:31064 map pfn RAM range req write-combining for [mem 0x3adb0000-0x3adb0fff], got write-back [ 1432.203071][T31052] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1432.240899][T31052] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1432.274030][T31052] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1432.280948][T31060] input: syz1 as /devices/virtual/input/input1356 [ 1432.320356][T31052] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1432.348005][T31064] x86/PAT: syz-executor.4:31064 map pfn RAM range req write-combining for [mem 0x3adc0000-0x3adc0fff], got write-back 18:44:47 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x988b7f571e66cb30, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x2, 0xff}, 'port1\x00', 0x51, 0x10000, 0x3, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x3}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000002c0)=0x2) 18:44:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/l2cap\x00') openat$cgroup_procs(r1, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x35}) 18:44:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x2000) [ 1432.731038][T31082] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1432.749136][T31084] input: syz1 as /devices/virtual/input/input1357 18:44:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x988b7f571e66cb30, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x2, 0xff}, 'port1\x00', 0x51, 0x10000, 0x3, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x3}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000002c0)=0x2) [ 1432.775116][T31082] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1432.805240][T31082] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1432.849462][T31090] input: syz1 as /devices/virtual/input/input1358 [ 1432.860893][T31082] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1432.930438][T31084] input: syz1 as /devices/virtual/input/input1359 18:44:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0xc880, 0x4) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000000)={0x3, 0x8b97, 0x0, 0x3, 0x1, 0x9, 0x23, "0dc8d01607e4a8dc3e0d59bc79bf4721b0bb9ae8", "e09eebf7f804b6228b4c3eb9ae69aeb98f2052c8"}) sendmsg(r2, &(0x7f0000001540)={&(0x7f0000000180)=@l2={0x1f, 0x3ff, {0x7, 0xfa, 0x1, 0x0, 0xa7}, 0x3a, 0x3}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000200)="376931ae7f726c7b8dd49d03dda00acb6cfa47b3150e60398e3a7b49e4eb15b57340b09b7a32c9aba83c5442b4ffeea597406cc21e1cee2f94c680b81307dbf5d18cef4f46a207dd136e9ccbe02b0532887ad262e4ac477fbd67ed0cadb82697b23cfc669bf2c962875d045d03eee7ef038514fb2da59f8fd8f2b7c17224d6b8925c0937ba8a9b713814a989a4fca32f653679c5452b8fc988", 0x99}, {&(0x7f00000002c0)="64b876f4b11ba85693c74d69a2b3ed18b984694bfa6b685c96cf4c4dad9bb81c3c1f03a4b8a90290627335eface5d42f40d5c56dfd02b1b8c7d56d3852ec0878ad40706655c12f3605ec453959d44b02602bf2272b16b571726a93df57af3302711521d2b981838e8203555c583eeb2e01ddb06da9cf9ee6ecebdbe991bf5d27212c828ca4e2c08d80eb00ef7017294d5c6de702c0850228bed0ce837134c73070a81afeaea4477a64c9db0031a38c1149d97e452882b9cb25115149a75abcbc4c91588801e2b704d70295c33ddd5509bbda41466a0bbc6bf0f7e20417bda08bef49a8379ef4c3c378816c316e2763dd8122340f8ec9b0854ccdacf07cf43a12d8eb57d3b93dd1c1b7577257408289859964cb0fb9c0d011381355d2b86223803ea8d57dbf8342ae8c0419c6292216da4a969e944c4dd14b99679a83dca661fd186d4be8ab6074ca3ce8559af3d51e4a7516e406f63b4933c538413dbf869e6252ae0d4e1bb7bbe5b37d278f1e2d5399e6055983b9cd8af57c26b78cad0935799042a68b3c6aa4b7564875abf1333ffeafad40fbaad567fdf19a96ce54b50863839224f8e13967acaaa5f11295a358fa5f558b293580ccc6c25d656132c18859b0f673b6af5931393e918cde1e455e9a5c575cc5834896cd13383b23fdb82739f5d190b4871aa7369db9a28b416cff548bddee40770bb6e2e067b000f8eee076e45c17069b7d18f72753abbf5f18bf1a3ddd1edf4e8ba0b56efed730bf2e8f363dbffb7e4cb5276c030176dc30bcc0266f2697d802d47f70542b94f2b9e0e489fe204e31f055858bd535d9d297863005f9bc9cb11f2526baf6cbb2dd7346208303ec0a96229f92dcfa13a2e4f0ad9e57e7bbfa07ba841452b4ffcad52ad64a90b9e9a9112cbc5ded69b11563728138764e56afa38ded236b8cc481c797f9abec3e1f1395bdd90b6dea36d3efa39fb8698e76ba4f0f97aada163e8548c2c8a5c910802745aab80f4eca18babda01df08a3661631d864d401d24197b1d9e7b6c80c7dfe401a743d517b91328ac3b270683a6dcd3503a8a4365076c3d14c0089c70fda5dc9ce5be851babbb68e1a48400295063a2408955493d08799d521a1cd50cac96651fc2059078b703c2140d15374b107e06658908201763e5068d99d148b06f185d36cdc697f7f1c05d02191dbd66ab332fddfaa1dad159812655c7d19808f1508f55eff0e7de126823f35ffcccb9e8cefcc356f3b0cbf050e65b47132edd00bd39ba8bfd33a056cec6f4f841b19426577ef65ffe08f7540334f20ad37e51e3993e5b0402b85f54e25e749db644210222260ad1070dd1a62b74937641020b189cc5d507ca7d5e573ecda47616628bce6903e11235ae8b7481a567c6d59780ccdcec9f882a04966699c56c51dd7a1b2d07db8ed60f41c6b14fe27c61448a8a16cbd5b589a136ee0af87fd2b71803fbc589ce121db1854879111d9aa32cddb11fc3195199ba8e87cf9558bb9879b63264095be96759d2a3b0f227c0cd344f2c1ca1338d80313fbed1067147fa9926d48e5e59d54184a8775fa1c155f1fa93a2c2c339cb5a139802240441856e87ecd6e50f30dee08fa555dce998e321ee320979e34d48797d5fb3cd662c1718073a9d0498963b8e0a6e88cbebc17fd4dccab0b575896f4be48add2c2dd6cc783ad9780d804a5e812abcae2b06bfd1bbbd39470e0db949a964e408e5491065401499eac713a47f5a1b1c315d2213f87bc0a61c75787b309d7022183d8ae518e8ff4ce5d67c7f7a8dab96915be7615d66fcc9b83a419c9868e27d2bfd853f851c1aad1900d01be44c347c4c2c9040419b5de2137cedce79ca2c00506133cfbdb893b6131283e0a09ed9d8b3a14ab2f63704fa7d11490a022d3d718bb7d99f62e7d3b8f609eff16d18c396462a0e1a3150960923796afa3e94c79f5433c78366daf223e4056403c320a451a17cc1575ca24394986c4b2ef3e471075d599ffea6f9593943888049d6509a95c399d3f4c6e861b7aab662ce630125025f4929eddb9c924276e3e552841026b6e35f53839d9e1143cac89dd5394e6808ce174ffa1ece877722160ad0103d5a2fd458cba457786ef299a700cd307d8dbc730023160b3a2c55cd74f36edb2fa568771c717df0eb6750307f15d7837c460beb73ba5cff13aa1eccdb614c6e9f76b423577119b5c71f26c6b5c5a622afca92d38afa35b657fee8b07d80cee1ae79b875d1079a96934f1382f0ff2368cba36f3e4d66b703d3b21f2784ecd8e1126e0423db995500a6715dcec1dea57b0f4eb2a13ea9e1d2495392cfac487d18ef1a0f186551622692b8a343a71fb69c7daf2c2136d47defd65876f8a2c734964db614b850805fcbdb488656e4bb0eca088f5866c90a1bee600e3545080f370fe7a99d62010a7fdfd53034053a1db1ad97a929dae7a1d9f2258ae728daf97bb6c9f4bde5b8b0331b0d0190f1056352498d9c0dfc3a84e3bc5eb30cf6313d3c5b3beb15885ec1a2ebe804dc0a42fd62bac0b98395a5f23ef52ac5df5eb0ca7358ae39f536f1338b17bc4df22cd995abf5d2837e996d67d65aca600aedd95a45003ecbfbf0f59ef3b076fe1a5e29f8b06c51d192f500b71f8396e035eafe6f7ab1146135cb26afc41d009d6a5a69218540c38f9a01a81a1f721b548a5d9fdcc3f2b08b9bde317eeb7d302b660ebc7bc24845f06a714c350f1bba48ccb6c788bf54765662cd6be8cbb4f3d0d58742adca61d3be42cc91efe3469e933e9046d629268e9ed58375e43c6b856a32afb0034dcbd787fed12a857159d1f9143a6a3de0d251e94aa69b3ffd7b36b923547308ec5f27d1521685b6562c75474419714f3aa3e3235fa7cf2f4bcb1e155ec25800a13e813d4b5eb14c9c3f7e2a7bc0f0948173e1769ce2e82890dc066d90a8fb8604c2c1b6080c86eb525a9e336f0836aaa5e84f0158d66511be4fc8bcf9b1eda78ac28dfa3ffc130caa2dddcbcb8e5297d4df11b948ae677da70bebe610b5ffd6f2f6f71f4ca88582aed7c81f6a46bbb58f25b677b2f172c2d0e692411a402345ff72bc425f26d96735437b19dce38e8b5c70c1fe663c78e7cca36bcecbbcb5ebf18af8e695af3423ec9f6613f85a741a8edcd0d8e11e66e7f08ab8fc62ff6eeb523974403f142d57b785bf1739def82d1c3de5e69f64238cac0312743dbc5920da5e817d0a807b182ed3d3acb2c51ca89f3a163c89a297e4813174fb9d29d57f1942333c8a29b2eb1dabda535b67d28f0f88e71fa04d69302b716fb330b5dda241191c0a508484c11bb566ee966aa2773dcdb67e9cc0bcb9075f5b2f24756c89f333845dfd935b48ce1d03d5b32bef2a02c5aea3829dbdb6f79232bad60e8cb4519499954eeea0a572d2d0cb45c07f732fa030ed563edb11996a25bb4b44db67ab62a835111f58491c9a469c2ff49a68453d3db83355c4cd17ab41967705dc3ff7ae4253f366f3976a6283a1b8ca2b2f9c05ec2db1bb5ef841ed3dd16d617bf95a526b6ad98a38855a0cde425a01dc31dd02c50f1e719219d5e7b12525f65aba75622e4f58eb9933a8664cde2a0445187550b5e44b766946cd22a4a933f473e60973f859091b927a2a20c5b28be400fea5a7e009c0000dee56a2150c020b6b1f5be70fe6f0cad2da8afd6b84ed9af3be74930267b0ecc4813c516f894209738fd6659e0895217713e67ca7a04996c5a62dd756e405cdc2a614ec3361980b2b90688403fa0234e95af575bdad7ac7a30e28320a3678371731817940617440478335f05738f9dc2a2d6b389e95c382ee814ffb63010b76311798e557404e1c9b242bd3387db446616ffbf5770d25c99db01f09688a015be39ba356499356b8a11e26942538d6363e0cd0090ca71829170b1e11ca1e5c4c4c096bec4ef9837d46dba49a452435f8d8c75c51008d09b481b62a3760948cd1d266d61335189be0ef36a36d364a93809956e534359c03a80e01c2da4bda776f028204e31c27b2facf52381ae7201dee57c47316b94febfa39875d41ceaf4a14567fde9c71a84046bbcd1cf5110de82c05f35510fd214f5eb113c9eda128ab2c06f8445a7845ca1e15dee96013e10db7b8df52ef408ec96a9b3b1850a3a3476c6415cc6529ed625869e527453d5bbafcf932e6e867d6cc16b78451eb6ff4f8b696318dc668c20b300ce2b4d358619467be00349bba0a6c3d469eead977bb1a72fc59012daf4e1cb17eee45b89eb779a200566d73218e54d52bd0bf56817b76b247d777f6c458ecf390c26dc746db3eb59568a3b2887dee1ee68c19e1527879fac5f0739de77793e5f378656c8b53fa7f683dc859b4eee2c6108c3c8f9be806f279da432206a3fe7ea169542e452564b0f45c8fe32677298e2cad55fd2a0691af072dab253cdf4546b5afe98b91269be347ffe62b7b9cac855f301ed1d95c845172d316fab93115c345bb86c146ab433da63119090d0429ca1dbb86c969d4e11aa50f8267fb429a3489f7222836946d1a47ef1237e916885516dd782aacee477f7e35835572aae040a58ee9f0f404156fc97cae3567b158d0d639b90bb85d2f560dd3ec67fd521697cdae22edd479ef04cdf2cfbfdb2a16bfc0a6214fee16ee90d382cfadd595cf9b5960c1178e7b58a1e0b310158b88dbda75dfbed1c852516fcc2d4dfaf3d69a8943115f525f07bfdb69c0e5ebab0d4030961282cdf78daede1b0b9412ed0ba684e5362061c7711e44fe4ae450ca1ecd158ac07b1e4ca171b0b96049dddca9f46f6ad0479a2260ff6a77637eacb34593c6fcdfe64a1f1df76d491d121b43167c9cbc029e551c6ddd1da858074c96bdd923c50796d29bbd1a46c0aa143631bffff91c55d56eea87c239df19263cb6e73dd4bce638f0d780a8c499258b84df295d432333d38938951a4d72d4468077c20992536e7b8b18a0301c680ed7277a31d06eafbf9acdecc515e7365fc22cf6c6bdb1d3e6ffc5901be654199957f8ac3d827fa4e7ec5eaaa913e7c2ba6a3784a1ac871fab4c300b8731eed36e7a79d896b8e7bc29b317325db9106f01c908055f14e0282debd60d7979bb346bee953ac7bfbf1fdbcb2084702faf35887fb5a141e0d254a58da2dc3e24661c7540a9a9b6125ed8f787c2f98a5606195d12d25acac8dbfb83b299139b5ac55aeb016523462b873f614c719e1a9d60ab1277c70926dd8c29f892393d235f56f8ec7b0def953b7a8d1935dbf7006d0ea34f8d3aad5a4e2ca6725200757b37c9668b3e621cfb2ef383a671c9177264efc3805106208cafbc734205ade6bce68d2088ceffb28c854e4dda30c2365cddd74d8218e42ca4fbed29358904a1cde0baf7b9c7be6f90fa46a9f60f3559fe362d432cd1400e3593995d1d12984df228911d4510dde264e15115089b413521f7fb6b82a3e12a31678f2176356c7561b3c7e35c69c65b1bf7e18f4a1abf50fd7e46ae032ac9bf50867f65412bb937730103310536554b70dd3a3316bc1b1d35df04192d8acc328490873d96c850144afa2334675805a8f4540bed5bd611a1d277c48640d6ac736477c29ac22f44fe4df8b86c3f2564d2b0aac2c34a595aab5c675ea1dd3c452cbcaac63b0837827c68b1276eec2c6ae3a2cab8fced0c756074e6ae2ce437f1a7afc22ad36af091e60ee0ae0dd69b941d9d296bbf1197221bc4d98ee528d465bc8bb04a56e3accc7f50a29e8261b849a42c9d1842ffa4738b6306c0d41df57da6ad64b62de1e6e7b501c2d053cfb0b06a6b78b6", 0x1000}], 0x2, &(0x7f0000001300)=[{0x108, 0x0, 0x80, "35c09193b4e1663d600a42a91e12fa9f164fbc4321318a49ea27a5895f8c18cdcac88e10abdb365298e005fcd70742cf2b66519fd6634a5bc3be9c3cbaf6f7f7fce58047c8a34f23b27293a66363ea6c4db1f1adfbadce5a6a24fd6f5d64bdd57c39d931e48b1a8eac2f74d510743224969d65e3b3b52efc2e41ebf5c6a6b383ff6850ec3698cfc384d4e186e5fb3e1a83bdc2ca310dd26fca8481be8635ab7dc53caf871f10bb3940992d4a5b38d337028c1fdb8eab836e8cc0849da5bafa2a5263514bd5457a1bd27a6036c4faf8063d648cbfa3cced5f45ed109b66a4f258438a950019efc22d6d4b127f1179d4a0e85c9faafd5a19"}, {0x100, 0x101, 0x6, "f9d3de8e0614f4602333637814243a450ff153ca10bf3d8ae22226d6c20de8c94cd8c0e5ef124541a3ee63f8f0875f76c0d7c46aa9116396c4b1460a0c9bdb2d4979eaedc98bdc7809cf791f1fd8490d0581c17ce99b4a8e351575d194ca7a8dc3e65d225d61953ec78ec3ca785c9e65c7549882e109613cb05a3e9461fab189d7c91e1a27b6322e337741403683edb615246c096b78d3ddb15faeb96a8cc5581a8613de7c07f5a331dc87677a89b76b2112c128f2887fc08170dabdc0af95d1c5bb64dadba43cdbcbe5e86f5665bded9cbdabf632add9bcafb7a56280a5bf41459c0e3b0c7d14ce321a7a"}], 0x208}, 0x1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000015c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000017c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f0000001780)={&(0x7f0000001600)={0x17c, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xd4, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e5}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4e}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}]}, @TIPC_NLA_BEARER={0x34, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'veth1\x00'}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40004}, 0x84001) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1433.011329][T31082] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1433.050319][T31084] input: syz1 as /devices/virtual/input/input1360 [ 1433.107596][T31082] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x988b7f571e66cb30, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x2, 0xff}, 'port1\x00', 0x51, 0x10000, 0x3, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x3}) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000002c0)=0x2) [ 1433.147876][T31082] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1433.239603][T31082] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x988b7f571e66cb30, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x2, 0xff}, 'port1\x00', 0x51, 0x10000, 0x3, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x3}) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000002c0)=0x2) 18:44:48 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1433.395256][T31084] input: syz1 as /devices/virtual/input/input1361 18:44:48 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x0) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) 18:44:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x988b7f571e66cb30, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x2, 0xff}, 'port1\x00', 0x51, 0x10000, 0x3, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x3}) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000002c0)=0x2) [ 1433.561918][T31119] x86/PAT: syz-executor.2:31119 map pfn RAM range req write-combining for [mem 0x3ae50000-0x3ae50fff], got write-back 18:44:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53d], [0xfffffffc]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) fcntl$setstatus(r3, 0x4, 0x800) [ 1433.650812][T31121] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1433.687297][T31121] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1433.706170][T31127] x86/PAT: syz-executor.2:31127 map pfn RAM range req write-combining for [mem 0x3ae60000-0x3ae60fff], got write-back [ 1433.725198][T31121] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1433.748655][T31121] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1433.759666][T31130] input: syz1 as /devices/virtual/input/input1365 18:44:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x988b7f571e66cb30, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x2, 0xff}, 'port1\x00', 0x51, 0x10000, 0x3, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x3}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000002c0)=0x2) [ 1433.861619][T31121] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1433.875151][T31130] input: syz1 as /devices/virtual/input/input1366 18:44:48 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800002, 0x0) bind$rose(r2, &(0x7f0000000280)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) statx(r1, &(0x7f0000000240)='./file0\x00', 0x0, 0x22, &(0x7f0000000140)) [ 1433.915558][T31121] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1433.983289][T31121] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1434.020051][T31121] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x988b7f571e66cb30, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x2, 0xff}, 'port1\x00', 0x51, 0x10000, 0x3, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x3}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000002c0)=0x2) 18:44:48 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='ddev/ion\x00', 0x9ceb453e6940661e, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x22a282, 0x0) 18:44:48 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1434.355495][T31155] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1434.378931][T31155] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1434.395193][T31155] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000000c0)=""/4096) [ 1434.443884][T31155] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x988b7f571e66cb30, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x2, 0xff}, 'port1\x00', 0x51, 0x10000, 0x3, 0x0, 0x8, 0x4, 0x0, 0x0, 0x2, 0x3}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000002c0)=0x2) 18:44:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000200)=0xfffffffa) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) connect$pptp(r5, &(0x7f0000000180)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={r8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=r8, @ANYBLOB="030006ddb70a000009004c0002000300"], &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r9, 0x1, 0x1}, 0xc) fcntl$dupfd(r1, 0x0, r0) r10 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r10, 0x4, 0x2000) [ 1434.555394][T31155] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:44:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) getpid() [ 1434.615360][T31155] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1434.645931][T31155] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1434.687550][T31155] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x988b7f571e66cb30, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000002c0)=0x2) 18:44:49 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:49 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0xfffffffffffffff4, 0x80800) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0), &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x2, 0x30}, &(0x7f0000000180)=0xc) r4 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x9, 0x200002) ioctl$TIOCLINUX4(r4, 0x541c, &(0x7f0000000240)) bind$bt_l2cap(r0, &(0x7f0000000200), 0xe) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x14b) listen(r0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x1, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r7, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x1000000000a929, 0x1}) [ 1434.985154][T31180] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1435.034187][T31180] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1435.054831][T31180] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1435.096910][T31184] x86/PAT: syz-executor.2:31184 map pfn RAM range req write-combining for [mem 0x3ad68000-0x3ad68fff], got write-back [ 1435.145365][T31180] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, 0x0, &(0x7f00000001c0)) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000180)={0x11, &(0x7f0000000100)="e0f005d7cfe341c9be20a21c346b2debc2"}) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000040)={0x38}, 0x1) fcntl$setstatus(r3, 0x4, 0x2000) 18:44:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x283, 0x3}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000002c0)=0x2) [ 1435.212754][T31190] x86/PAT: syz-executor.2:31190 map pfn RAM range req write-combining for [mem 0x3ae9b000-0x3ae9bfff], got write-back [ 1435.260642][T31180] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1435.280497][T31180] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1435.295607][T31180] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1435.304442][T31180] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:50 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8800, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000002c0)=0x2) 18:44:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x20, 0x8000) splice(r0, &(0x7f0000000000), r1, &(0x7f0000000100), 0x9, 0x4) 18:44:50 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='dmask=0000000000100000000000']) 18:44:50 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000002c0)=0x2) [ 1435.690330][T31209] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1435.705281][T31209] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1435.737975][T31209] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1435.805205][T31209] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:50 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 18:44:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000180)=""/125) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$PPPIOCSFLAGS(r6, 0x40047459, &(0x7f00000000c0)=0x110) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) r7 = openat(r5, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) ioctl$SIOCNRDECOBS(r7, 0x89e2) 18:44:50 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x2) 18:44:50 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1436.046554][T31228] x86/PAT: syz-executor.2:31228 map pfn RAM range req write-combining for [mem 0x3af30000-0x3af30fff], got write-back [ 1436.154793][T31234] devpts: called with bogus options 18:44:50 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x2) [ 1436.340655][ T26] audit: type=1800 audit(1570992291.009:32056): pid=31246 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17055 res=0 [ 1436.370312][T31241] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1436.421931][T31246] input: syz1 as /devices/virtual/input/input1367 [ 1436.517635][T31241] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:51 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1436.655607][T31241] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1436.715216][T31241] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x2) 18:44:51 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000040)={0x7e1c, 0x20, 0xff, 0xfffffffb, 0xfc, "fdbc63a8e64ab9313cc3f00821000d62650239", 0x2, 0x4}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x1100000000a929, 0x1}) [ 1436.869010][T31241] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1436.925710][T31241] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1436.949356][T31245] devpts: called with bogus options [ 1436.969476][T31241] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x2) [ 1437.000292][T31265] x86/PAT: syz-executor.2:31265 map pfn RAM range req write-combining for [mem 0x57250000-0x57250fff], got write-back [ 1437.017465][ T26] audit: type=1800 audit(1570992291.689:32057): pid=31249 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17055 res=0 [ 1437.039086][T31241] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1437.090714][T31269] x86/PAT: syz-executor.2:31269 map pfn RAM range req write-combining for [mem 0x3af60000-0x3af60fff], got write-back 18:44:51 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="00fb5a02053e76df9aeadf7592108b3466dd38be85fa65f051dc1f141abdfd4306116c20ac5e33f285a35193b2bce3a43587c78e18895b13d944494ae675edb9042e8d8ab482321517be1ab40500000061353f8d221ce2832575cd0ac6b7abb8098677f96a278f7875a872d8f0b3347569ba0d1ad7a980e0a662f258ba29e3eb71ad4487347de85860140f46f69becd8585f58ea690295cd4c5d5965ac99bf38006bfafbffffff7f000000005e261c59a1844c325633f18fb2996da768a114edcbcc9d942573be66d33e7b25c57b6a763078b485bf9c98271771bb17a370fe7bfb916223352ba0c8d54b76f31ecdbad611e36daba4ea019c7394ca0100000077623a1d60dc30c5eec86bfb5f010bac0000000000000000000000f0716365d3f88e43958aa5ac188b09fcf8989e15799dcdc81fb2b2286f0f45f59576d6534a6e97746bb6f58b4b031cb2bf769475047cea2a72f14967b10dbb345256c61a70a084e7acb3ea9ae55a0d64eaf0e1000000"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 18:44:51 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x2) [ 1437.292950][T31277] devpts: called with bogus options [ 1437.406146][T31281] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1437.425352][T31281] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:52 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 18:44:52 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x100000, 0x29, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x40280, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x2, 0x20, 0x0, r2}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000180)=0x8000) syz_open_dev$sndseq(&(0x7f0000000140)='/d\x93v/snd/seq\x00', 0x0, 0x101000) [ 1437.465391][T31281] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1437.553841][T31281] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1437.592515][T31290] input: syz1 as /devices/virtual/input/input1368 18:44:52 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r1 = dup(r0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000002c0)=0x2) [ 1437.692116][T31290] input: syz1 as /devices/virtual/input/input1369 18:44:52 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1437.775793][T31294] devpts: called with bogus options 18:44:52 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r1 = dup(r0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000002c0)=0x2) [ 1437.994876][ T26] audit: type=1800 audit(1570992292.659:32058): pid=31307 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17055 res=0 [ 1438.074162][T31307] input: syz1 as /devices/virtual/input/input1371 [ 1438.275283][T31305] input: syz1 as /devices/virtual/input/input1370 [ 1438.289345][T31310] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1438.317773][T31310] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='\xff\x01\xe3\xff\x01\x01\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f00000000c0)=0x7) [ 1438.380212][T31310] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1438.449787][T31310] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:53 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r1 = dup(r0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000002c0)=0x2) 18:44:53 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="00fb5a02053e76df9aeadf7592108b3466dd38be85fa65f051dc1f141abdfd4306116c20ac5e33f285a35193b2bce3a43587c78e18895b13d944494ae675edb9042e8d8ab482321517be1ab40500000061353f8d221ce2832575cd0ac6b7abb8098677f96a278f7875a872d8f0b3347569ba0d1ad7a980e0a662f258ba29e3eb71ad4487347de85860140f46f69becd8585f58ea690295cd4c5d5965ac99bf38006bfafbffffff7f000000005e261c59a1844c325633f18fb2996da768a114edcbcc9d942573be66d33e7b25c57b6a763078b485bf9c98271771bb17a370fe7bfb916223352ba0c8d54b76f31ecdbad611e36daba4ea019c7394ca0100000077623a1d60dc30c5eec86bfb5f010bac0000000000000000000000f0716365d3f88e43958aa5ac188b09fcf8989e15799dcdc81fb2b2286f0f45f59576d6534a6e97746bb6f58b4b031cb2bf769475047cea2a72f14967b10dbb345256c61a70a084e7acb3ea9ae55a0d64eaf0e1000000"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1438.548925][T31310] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1438.626480][T31310] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7ff, 0x2, [0x40, 0x3]}, &(0x7f00000000c0)=0xc) [ 1438.685164][T31310] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1438.718968][T31310] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000002c0)=0x2) 18:44:53 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) [ 1438.766271][T31331] devpts: called with bogus options 18:44:53 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:53 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1400000000a927, 0x1, 0x1}) 18:44:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000002c0)=0x2) [ 1438.959783][T31343] devpts: called with bogus options [ 1439.122582][ T26] audit: type=1800 audit(1570992293.789:32059): pid=31349 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17371 res=0 [ 1439.182419][T31349] input: syz1 as /devices/virtual/input/input1372 [ 1439.378306][T31353] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:44:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000240)={r7, 0x3}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r6, 0x4010641c, &(0x7f0000000100)={r7, &(0x7f0000000040)=""/166}) ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, &(0x7f0000001100)={r7, 0x2}) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r10, 0x8941, &(0x7f00000010c0)=@get={0x1, &(0x7f00000000c0)=""/4096, 0x5}) r11 = dup(r9) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r11, 0x0) epoll_wait(r11, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, 0xffff) [ 1439.435160][T31353] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1439.474739][T31353] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000002c0)=0x2) 18:44:54 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x8040, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) clone(0x4007ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/54, 0x36) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000ec0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b00000005000000b0040000000000000000000000000000f8020000e0000000180400001804000018040000180400001804000005000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/80], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800e0000000000000000000000000000000000000000000000000004800444e415400000000000000000000000000000000000000000000000000010100000000000000000000000000000000000001ac1414aa00000000000000000000000009000064ac1414287f000001ffffffff000000ff65716c000000000000000000000000006873723000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000040002000000000000000000000000000000c000e8000000000000000019acc25c0000000000000000000000000000000000280069636d70000000000000000000000000000000000000000000000000000000060901000000002800534554000000000000000000000000000000000000000000000000000001090083000100038a0000000000000000000000ffffffffff76657468305f746f5f7465616d00000069726c616e3000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000890002020000000000000000000000000000f80030010000000000000000000000000000000000000000000000003800737461746973746963000000000000000000000000000000000000000000010001000000000006000000400000008100000000000000280074746c00000000000000000000000000000000000000000000000000000036800000000000003800534e41540000000000000000000000000000000000000000000000000000010000000600000000000100ac1414bb7f0089000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8002001000000000000000000000000000000000000000000000000280074746c0000000000000000000000000000000000000000000000000000000100000000000000280069636d7000000000000000000000000000000000000000000000000000000307080100000000380052454449524543540000000000000000000000000000000000000000000001000000020000007f000001ac14141c4e22006700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x510) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r2, 0x1000008912, &(0x7f0000000240)="0800b5055e0bcfe87b0071") r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r3, 0x29, 0x8000000039, &(0x7f0000000180)="d1020400005800200007000613f32e1c00ce5fe1b471985e", 0x18) sendto$inet6(r3, &(0x7f0000000300)='\x00', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r3, 0xb) accept(r3, 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) rseq(&(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x6, 0x7, 0x8, 0x3f}, 0x7}, 0x20, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) [ 1439.525094][T31353] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1439.547035][T31363] x86/PAT: syz-executor.5:31363 map pfn RAM range req write-combining for [mem 0x3afd0000-0x3afd0fff], got write-back [ 1439.602800][T31363] x86/PAT: syz-executor.5:31363 map pfn RAM range req write-combining for [mem 0x3afe0000-0x3afe0fff], got write-back [ 1439.673807][T31353] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1439.717606][T31353] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1439.756001][T31363] x86/PAT: syz-executor.5:31363 map pfn RAM range req write-combining for [mem 0x38900000-0x38900fff], got write-back [ 1439.769084][T31353] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x2) [ 1439.812716][T31353] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:54 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) 18:44:54 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="00fb5a02053e76df9aeadf7592108b3466dd38be85fa65f051dc1f141abdfd4306116c20ac5e33f285a35193b2bce3a43587c78e18895b13d944494ae675edb9042e8d8ab482321517be1ab40500000061353f8d221ce2832575cd0ac6b7abb8098677f96a278f7875a872d8f0b3347569ba0d1ad7a980e0a662f258ba29e3eb71ad4487347de85860140f46f69becd8585f58ea690295cd4c5d5965ac99bf38006bfafbffffff7f000000005e261c59a1844c325633f18fb2996da768a114edcbcc9d942573be66d33e7b25c57b6a763078b485bf9c98271771bb17a370fe7bfb916223352ba0c8d54b76f31ecdbad611e36daba4ea019c7394ca0100000077623a1d60dc30c5eec86bfb5f010bac0000000000000000000000f0716365d3f88e43958aa5ac188b09fcf8989e15799dcdc81fb2b2286f0f45f59576d6534a6e97746bb6f58b4b031cb2bf769475047cea2a72f14967b10dbb345256c61a70a084e7acb3ea9ae55a0d64eaf0e1000000"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) 18:44:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r3}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={r3, 0x1, 0x2, [0x5, 0x8b]}, &(0x7f00000000c0)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) 18:44:54 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000000c0)={r5, 0xc1, "a5918cda49fb32171cf3230615a29143f745f148e8be389c2b6b5108bed05442b8becce520e0be5e0dbd929126e6dd58b7b834238a3be32f8bd381aefa09be14b53a38721159e6f4f64649c94676061c680a5469ea57f3512a8d8173b3cf55f261269ecf6250b79b80fbaa8ce2afbc3ef6ecf2f8be3d26b87291edc0a8a7f17dfe444f09ccdab14ef47668bb1b64bed51d993c23afe46d313916b0a418ecba57cf4f02a0a629d39f9846bcf90103a1ec206c989055377fdcd3fbc110cc92faefda"}, &(0x7f0000000000)=0xc9) lseek(r1, 0x0, 0x0) 18:44:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x2) 18:44:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) lseek(r1, 0x0, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1440.280267][T31401] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1440.288548][T31398] devpts: called with bogus options 18:44:55 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 18:44:55 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x9) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) signalfd4(r2, &(0x7f0000000000)={0xffffffff}, 0x8, 0x800) lseek(r1, 0x0, 0x0) [ 1440.409701][T31401] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1440.470037][T31409] input: syz1 as /devices/virtual/input/input1373 [ 1440.479909][T31401] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x2) [ 1440.521468][T31401] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1440.569795][T31415] input: syz1 as /devices/virtual/input/input1374 [ 1440.577532][T31414] devpts: called with bogus options [ 1440.648770][T31401] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1440.694400][T31401] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:55 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x341082, 0x0) unshare(0x10000100) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1440.743013][T31401] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1440.816426][ T26] audit: type=1800 audit(1570992295.489:32060): pid=31429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17735 res=0 [ 1440.838100][T31401] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1440.885643][T31429] input: syz1 as /devices/virtual/input/input1376 18:44:55 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000140)=0x2) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1233c1, 0x0) pidfd_send_signal(r3, 0x0, &(0x7f00000000c0)={0x2, 0x3}, 0x0) 18:44:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x2) 18:44:55 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:55 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x40100) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1441.264152][T31441] input: syz1 as /devices/virtual/input/input1377 18:44:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x2) 18:44:56 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1441.420659][T31448] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:44:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x8, 0x4d, 0x1, r2}) lseek(r4, 0x0, 0x0) [ 1441.474898][T31448] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1441.555249][T31448] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1441.585320][T31448] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1, 0x3}) [ 1441.636933][T31460] devpts: called with bogus options 18:44:56 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 18:44:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x2) [ 1441.713552][T31466] input: syz1 as /devices/virtual/input/input1379 [ 1441.832735][T31448] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:44:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x44842, 0x0) accept4$x25(r1, 0x0, &(0x7f00000000c0), 0x80000) [ 1441.923530][T31448] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1441.972869][T31479] devpts: called with bogus options 18:44:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, r3}) lseek(r4, 0x0, 0x0) 18:44:56 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = dup(0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000002c0)=0x2) [ 1442.002757][T31448] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1442.037289][T31448] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1442.151710][ T26] audit: type=1800 audit(1570992296.819:32061): pid=31488 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16524 res=0 [ 1442.211060][T31488] input: syz1 as /devices/virtual/input/input1381 18:44:57 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:44:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f00000001c0)={{0x1, 0x0, @descriptor="2c4b9f6253dfb8de"}}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x20300) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000065c7000000000000000400000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="000000a3e3550525c55ac00000c21701"], @ANYBLOB='\x00'/72], 0xb8) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/on\x00', 0x4213b006b9e4812e, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000002c0)={0x0, 0x0, @ioapic}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000002000/0x10000)=nil, 0x10000, 0x0, 0x20010, r4, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000240)={0x1, 0x7fffffff}) [ 1442.482992][T31494] x86/PAT: syz-executor.5:31494 map pfn RAM range req write-combining for [mem 0x3ac60000-0x3ac60fff], got write-back [ 1442.606621][T31499] x86/PAT: syz-executor.5:31499 map pfn RAM range req write-combining for [mem 0x389a0000-0x389a0fff], got write-back 18:44:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = dup(0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000002c0)=0x2) [ 1442.651884][T31500] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1442.690504][T31500] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1442.728895][T31500] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1442.745542][T31500] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000), &(0x7f00000000c0)=0x4) lseek(r1, 0x0, 0x0) [ 1442.907290][T31500] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:44:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x230000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) 18:44:57 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000500)='./file0\x00', 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1442.968009][T31500] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x80000001, 0x88200) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x3, 0xf3, [], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=""/243}, &(0x7f0000000280)=0x78) lseek(r1, 0x0, 0x0) 18:44:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) r1 = dup(0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000002c0)=0x2) [ 1443.060857][T31520] devpts: called with bogus options [ 1443.062478][T31500] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1443.118069][T31500] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000000)=0x80) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x98a29bac9b22fd6a) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) r4 = getegid() write$FUSE_ENTRY(r2, &(0x7f00000002c0)={0x90, 0x0, 0x6, {0x1, 0x3, 0x400, 0x4, 0x8, 0x4, {0x3, 0x2, 0x40, 0xff, 0x1, 0x4, 0x8, 0x6, 0x3, 0x0, 0x2a, r3, r4, 0x9, 0x983e}}}, 0x90) [ 1443.287262][ T26] audit: type=1800 audit(1570992297.959:32062): pid=31533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16524 res=0 18:44:58 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1443.356247][T31533] input: syz1 as /devices/virtual/input/input1382 18:44:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) r2 = socket(0x11, 0x800000003, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x1f) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="52000000569ecc75dfdc3f8847f3d6073e1b9226302f4231d51b97c602a1280c19ab54fbfb231e62c609884fe74ff8b168bd5c1055b428f02629fd488132bfe6b7b5c251839f3eeade65a324747f0d4bf696e75a5b442d55b5c0bd6cc9cdde3dcc1b60bc1f0d0163fb2103881bb90aa303e82e302c0e0a1423704cd01d9e4f85ea50b9325a99a62898103ff6487e2225d98f34cd21caf865f762000000"], &(0x7f0000000140)=0x5a) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000180)=r3, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r4, 0x0, 0x0) 18:44:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000002c0)=0x2) [ 1443.698699][T31542] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1443.785118][T31542] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1, 0x0, 0xffffffffffffffff}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) fsetxattr$security_ima(r2, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000200)=@md5={0x1, "7e9585f6185da1cce5c4034d0c48761d"}, 0x11, 0x1) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000180)={0x8, 0x296, 0xffff, 0xfffff001, 0x4, 0x80, 0x7, 0x7, 0x8, 0x2, 0x3, 0x401}) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20ncci\x00', 0x88000, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x200002) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'U-', 0x7}, 0x28, 0x0) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f00000000c0)={0x2, 0x1, @raw_data=[0xc9, 0x800000, 0x9f, 0x5, 0xfffffff9, 0x7f, 0x4000000, 0xfffffff7, 0x4, 0x63, 0x7, 0x80000000, 0x7, 0x1e, 0x100, 0x9]}) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000340)={0x2, 0x0, 0x8, 0x81, 0x7, 0x200}) r8 = dup(r7) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r8, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f0000000300)={0x1, 0x3, 0x6, 0x7f, 0x3, 0x0, 0x1f, 0x2, 0x7fff, 0x9}) [ 1443.865289][T31542] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:44:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x0) [ 1443.955653][T31542] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:44:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000002c0)=0x2) 18:44:58 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000500)='./file0\x00', 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1444.017210][T31556] input: syz1 as /devices/virtual/input/input1383 [ 1444.091946][T31542] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1444.155378][T31542] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1444.210847][T31556] x86/PAT: syz-executor.2:31556 map pfn RAM range req write-combining for [mem 0x38a70000-0x38a70fff], got write-back [ 1444.221704][T31542] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1444.279554][T31568] devpts: called with bogus options 18:44:59 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x202040, 0x0) write$P9_RREAD(r0, &(0x7f00000000c0)={0x3b, 0x75, 0x1, {0x30, "0bfe2aac97fb43851ab2b62cb6226559d7e1843ce2c13aa0750c2975115ad2673ba34cb8498fb4bad959b614894c3bca"}}, 0x3b) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r2, 0x0, 0x0) [ 1444.327662][T31542] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1444.480633][ T26] audit: type=1800 audit(1570992299.149:32063): pid=31575 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17647 res=0 [ 1444.559161][T31575] input: syz1 as /devices/virtual/input/input1384 18:44:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000002c0)=0x2) 18:44:59 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1444.738086][T31576] x86/PAT: syz-executor.2:31576 map pfn RAM range req write-combining for [mem 0x38a90000-0x38a90fff], got write-back 18:44:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x1f1051, 0xffffffffffffffff, 0x0) ioctl$BLKALIGNOFF(r4, 0x127a, &(0x7f0000000000)) 18:44:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x2c0280) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x41000000000a927, 0x2, 0x0, r1}) 18:44:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) [ 1445.051107][T31590] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:44:59 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000500)='./file0\x00', 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1445.135230][T31590] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:44:59 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x440400, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x100010, r2, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000000c0)=0x2, 0x4) lseek(r3, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) [ 1445.191590][T31590] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1445.246549][T31590] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:45:00 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) getresgid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)) 18:45:00 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) [ 1445.331320][T31607] devpts: called with bogus options [ 1445.381035][T31590] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1445.457096][T31590] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:45:00 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x800, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000000c0)={0x3, 0x100000000, 0x7}) [ 1445.545311][T31590] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:45:00 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 18:45:00 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) [ 1445.585667][T31590] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:45:00 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x8, 0x30051, r2, 0x1000000) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="f3"], 0x1) bind$rose(r4, &(0x7f00000002c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@null, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) dup3(r4, r3, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) io_setup(0x8, &(0x7f0000000240)=0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x40000}]) io_pgetevents(r5, 0x8, 0xa, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000), &(0x7f0000000280)={&(0x7f0000000240)={0xfffffffffffffff9}, 0x8}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x1000000000a929, 0x1}) 18:45:00 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1445.790372][T31629] devpts: called with bogus options 18:45:00 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="00fb5a02053e76df9aeadf7592108b3466dd38be85fa65f051dc1f141abdfd4306116c20ac5e33f285a35193b2bce3a43587c78e18895b13d944494ae675edb9042e8d8ab482321517be1ab40500000061353f8d221ce2832575cd0ac6b7abb8098677f96a278f7875a872d8f0b3347569ba0d1ad7a980e0a662f258ba29e3eb71ad4487347de85860140f46f69becd8585f58ea690295cd4c5d5965ac99bf38006bfafbffffff7f000000005e261c59a1844c325633f18fb2996da768a114edcbcc9d942573be66d33e7b25c57b6a763078b485bf9c98271771bb17a370fe7bfb916223352ba0c8d54b76f31ecdbad611e36daba4ea019c7394ca0100000077623a1d60dc30c5eec86bfb5f010bac0000000000000000000000f0716365d3f88e43958aa5ac188b09fcf8989e15799dcdc81fb2b2286f0f45f59576d6534a6e97746bb6f58b4b031cb2bf769475047cea2a72f14967b10dbb345256c61a70a084e7acb3ea9ae55a0d64eaf0e1000000"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1445.816530][ T26] audit: type=1804 audit(1570992300.489:32064): pid=31632 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir277122277/syzkaller.HcP8ef/2542/bus" dev="sda1" ino=17666 res=1 18:45:00 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) fanotify_init(0xcc, 0x80c00) lseek(r1, 0x0, 0x0) 18:45:00 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)) [ 1445.914047][ T26] audit: type=1804 audit(1570992300.569:32065): pid=31632 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir277122277/syzkaller.HcP8ef/2542/bus" dev="sda1" ino=17666 res=1 18:45:00 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x244c00, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="040000000000000000000000000000001f00995600060000000600000000000002000000000000007d0a00000000000000000000010000004b0b0000000002000500000000000000"]) 18:45:00 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1446.072259][T31646] devpts: called with bogus options [ 1446.110355][T31647] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1446.206968][T31647] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:45:00 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)) 18:45:01 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$KVM_ASSIGN_DEV_IRQ(r5, 0x4040ae70, &(0x7f0000000140)={0x9bb, 0x0, 0x5, 0x1}) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r8, 0x0) ioctl$TCGETX(r8, 0x5432, &(0x7f0000000180)) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r11 = dup(r10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r11, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r11, 0xc0206434, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f00000000c0)={0x6, r12}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r13 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r13, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r13, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r13, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1446.306530][T31647] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:45:01 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1446.375212][T31647] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:45:01 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000002bc0), &(0x7f00000032c0)=0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r2 = accept4$unix(r0, &(0x7f0000000180), &(0x7f0000000100)=0x6e, 0x80000) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000036c0)={{0xa, 0x4e24, 0x800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3ff}, {0xa, 0x4e20, 0x8, @local, 0x6898fc9b}, 0x0, [0x0, 0x1, 0x20, 0x1c00, 0xf7, 0x8000, 0xb834e85, 0x1f]}, 0x5c) recvmmsg(r2, &(0x7f0000003540)=[{{&(0x7f0000000200)=@ipx, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1, &(0x7f0000000380)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000001380)=@nfc_llcp, 0x80, &(0x7f0000001580)=[{&(0x7f0000001400)=""/45, 0x2d}, {&(0x7f0000001440)=""/186, 0xba}, {&(0x7f0000001500)=""/85, 0x55}], 0x3}, 0x1}, {{&(0x7f00000015c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002640)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, &(0x7f0000002680)=""/91, 0x5b}, 0x3ff}, {{&(0x7f0000002700)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002780)=""/31, 0x1f}, {&(0x7f00000027c0)=""/39, 0x27}, {&(0x7f0000002800)=""/240, 0xf0}, {&(0x7f0000002900)=""/243, 0xf3}, {&(0x7f0000002a00)=""/190, 0xbe}, {&(0x7f0000002ac0)=""/9, 0x9}, {&(0x7f0000002b00)=""/15, 0xf}], 0x7, &(0x7f0000002bc0)}, 0x9}, {{&(0x7f0000002c00)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000003380)=[{&(0x7f0000002c80)=""/82, 0x52}, {&(0x7f0000002d00)=""/204, 0xcc}, {&(0x7f0000002e00)=""/206, 0xce}, {&(0x7f0000002f00)=""/190, 0xbe}, {&(0x7f0000002fc0)=""/243, 0xf3}, {&(0x7f00000030c0)=""/211, 0xd3}, {&(0x7f00000031c0)=""/136, 0x88}, {&(0x7f0000003280)=""/22, 0x16}, {&(0x7f00000032c0)}, {&(0x7f0000003300)=""/122, 0x7a}], 0xa, &(0x7f0000003440)=""/214, 0xd6}, 0x7fffffff}], 0x5, 0x22001, &(0x7f0000003680)={0x77359400}) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) recvmmsg(r4, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) bind(r4, &(0x7f0000003740)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2}, [@bcast, @default, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1446.515801][T31647] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1446.580212][T31647] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:45:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)) [ 1446.652980][T31647] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1446.710265][T31647] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1446.776397][T31679] devpts: called with bogus options 18:45:01 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\xff', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1446.982473][ T26] audit: type=1800 audit(1570992301.649:32066): pid=31689 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17746 res=0 [ 1447.038422][T31689] input: syz1 as /devices/virtual/input/input1385 18:45:01 executing program 3: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x2) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket(0x840000000002, 0x3, 0x200000000000ff) sendmmsg$inet(r4, &(0x7f0000002dc0)=[{{&(0x7f0000000300), 0x10, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="139e094b0000000099bf744307f631cd168c6337e4fa417f35c43a77d0f8abb4cabe6f1c07d7edc5faa880c53e71aa7fff6c2415c8dccc59060000001507dd0181a7ec64e3d8527c8060ece0308835ac20c62c43d025a77c0340ecaf2caea3048cebb0e7a9acf652095a779c3b5f5fe85d312b2f771e84264dd918d6db80f5847360bfe028db73d8ded6744e4efbabb7acb832f15d761e94ece37fdfcc9224bfae4c899e6f2749732a9549d82662433b72c5551bda306f043ae105a756811791b9d5"], 0xc2}}], 0x1, 0x0) getsockname(r4, &(0x7f00000003c0)=@tipc=@id, &(0x7f0000000180)=0x218) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x24000) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0xaa850ab34c804c98) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r6, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f00000002c0)) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) 18:45:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a923, 0x1}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000240)) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000140)=""/218) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x30051, r6, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r6, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {r7, r8+10000000}}, &(0x7f0000000100)) [ 1447.635598][T31711] x86/PAT: syz-executor.2:31711 map pfn RAM range req write-combining for [mem 0x38ba0000-0x38ba0fff], got write-back 18:45:02 executing program 3: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) 18:45:02 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1447.688137][T31711] x86/PAT: syz-executor.2:31711 map pfn RAM range req write-combining for [mem 0x65630000-0x65630fff], got write-back 18:45:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f0000000140)) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r7 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x2) ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0xfffffffffffff001) 18:45:02 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1447.796579][T31711] x86/PAT: syz-executor.2:31711 map pfn RAM range req write-combining for [mem 0x38bb0000-0x38bb0fff], got write-back [ 1447.956588][T31720] devpts: called with bogus options 18:45:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000000)=0x12800) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:45:02 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/deion\x00', 0x4800, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xb, 0x30051, r2, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0xffffffffffffffff, 0x2d, 0x45ce404666b479d4}) [ 1448.037999][T31728] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1448.111704][T31728] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1448.163293][ T26] audit: type=1800 audit(1570992302.829:32067): pid=31734 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17701 res=0 [ 1448.195159][T31736] input: syz1 as /devices/virtual/input/input1386 18:45:02 executing program 3: symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') setreuid(0x0, 0xee00) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') [ 1448.405471][T31728] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1448.433469][T31740] x86/PAT: syz-executor.2:31740 map pfn RAM range req write-combining for [mem 0x59d60000-0x59d60fff], got write-back [ 1448.465292][T31728] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1448.563618][T31728] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1448.578526][T31744] x86/PAT: syz-executor.2:31744 map pfn RAM range req write-combining for [mem 0x38bd0000-0x38bd0fff], got write-back [ 1448.640367][T31728] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1448.703249][T31728] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1448.741438][T31728] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:45:03 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x1ff, &(0x7f0000000080)=0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x35b2, 0x100000000}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) 18:45:03 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 18:45:03 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1449.017878][T31757] devpts: called with bogus options 18:45:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_nanosleep(0x50475625870a4934, 0x0, &(0x7f0000000200)={0x77359400}, 0x0) [ 1449.206617][ T26] audit: type=1800 audit(1570992303.869:32068): pid=31765 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17645 res=0 [ 1449.267598][T31765] input: syz1 as /devices/virtual/input/input1387 [ 1449.450396][T31761] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1449.466057][T31761] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1449.520126][T31761] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1449.601874][T31761] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:45:04 executing program 3: [ 1449.783486][T31761] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1449.805260][T31761] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1449.830856][T31761] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1449.874183][T31761] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:45:04 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 18:45:04 executing program 3: 18:45:04 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:45:04 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x10', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1450.103770][T31784] devpts: called with bogus options 18:45:04 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0xfffffffffffffe50) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r4 = fcntl$dupfd(r2, 0x406, r3) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f00000000c0)={0x3c, "4754477fb8b1e148d98b4b48731462e69b7042be185cffadc887c1ff2ed666b1dbfba937d91eb625ae9b6ed49f85d899d92faf20ece03c3db1b2bc1659e7b5444df0b0db3357eb5c7c72abadfe84eaa2f2b181ed6a686c1e44566da5b696a16c4ac4d2ac954c023baa548cc85f0b6c235481c773d0890a3935f6a446c7d8fa08"}) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_OIF={0x8, 0x4, r8}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getqdisc={0x28, 0x26, 0x546f89b6a5b26ee, 0x70bd2d, 0x25dfdbfc, {0x0, r8, {0xe, 0x6}, {0xab71a4994815c626, 0xfff2}, {0x5, 0x4}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x6008004}, 0x80800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@restrict={0xf, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x3f7f6362bb4c15fc, 0x0, 0x30, 0x5f, 0x61, 0xf, 0x2e, 0x30, 0x58, 0x5f]}}, &(0x7f0000000180)=""/178, 0x30, 0xb2, 0x1}, 0x20) r9 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/capi/capi20ncci\x00', 0xc000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0}, &(0x7f0000000940)=0xc) r11 = timerfd_create(0x0, 0x0) fstat(r11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r12, r12, 0x0) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000880)='fuseblk\x00', 0x8, &(0x7f0000000980)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {'group_id', 0x3d, r12}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x80000001}}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other='allow_other'}], [{@pcr={'pcr', 0x3d, 0xc}}, {@seclabel='seclabel'}, {@dont_hash='dont_hash'}]}}) 18:45:04 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) dup2(0xffffffffffffffff, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="00fb5a02053e76df9aeadf7592108b3466dd38be85fa65f051dc1f141abdfd4306116c20ac5e33f285a35193b2bce3a43587c78e18895b13d944494ae675edb9042e8d8ab482321517be1ab40500000061353f8d221ce2832575cd0ac6b7abb8098677f96a278f7875a872d8f0b3347569ba0d1ad7a980e0a662f258ba29e3eb71ad4487347de85860140f46f69becd8585f58ea690295cd4c5d5965ac99bf38006bfafbffffff7f000000005e261c59a1844c325633f18fb2996da768a114edcbcc9d942573be66d33e7b25c57b6a763078b485bf9c98271771bb17a370fe7bfb916223352ba0c8d54b76f31ecdbad611e36daba4ea019c7394ca0100000077623a1d60dc30c5eec86bfb5f010bac0000000000000000000000f0716365d3f88e43958aa5ac188b09fcf8989e15799dcdc81fb2b2286f0f45f59576d6534a6e97746bb6f58b4b031cb2bf769475047cea2a72f14967b10dbb345256c61a70a084e7acb3ea9ae55a0d64eaf0e1000000"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1450.277869][T31790] input: syz1 as /devices/virtual/input/input1388 18:45:05 executing program 3: 18:45:05 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\xff', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1450.511457][T31800] devpts: called with bogus options [ 1450.607561][T31790] input: syz1 as /devices/virtual/input/input1390 18:45:05 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) dup2(0xffffffffffffffff, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 18:45:05 executing program 3: 18:45:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = accept4$netrom(r2, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @null, @remote, @default, @netrom, @null, @netrom, @bcast]}, &(0x7f0000000280)=0xfffffffffffffd7f, 0x80000) read(r3, &(0x7f0000000140)=""/134, 0x86) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) 18:45:05 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\xff', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1450.972326][T31820] devpts: called with bogus options 18:45:05 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x4128, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="0bc06203830b53f8e45ced5ac5f9d8a1a274773595ebb2f3f5263c695d603e12fd803f509cbbe0b30ac20db8187e11beac56adddb294dbb70ea8937783130b56d2ff326b5806a31c45fec8d1c67d36f8dcfbd5db6224958e4e981e502e5fd380c68e189a040093e7b8fdab35324bd7c6520239ca97ab9af2dd2adbee4d86eb8927a47c5a055f4f6acb5b700c6d8ee2d727170bd270431299fc51bf8453a3144c2e0ba20352fa387d611960f25f1643147d", 0xb1, 0x8}], 0x850082, &(0x7f0000000280)={[{@codepage={'codepage', 0x3d, 'iso8859-14'}}]}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r6, &(0x7f0000000000)={0x29, 0x3, 0x0, {0x4, 0x8, 0x0, 'security'}}, 0x29) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:45:05 executing program 3: 18:45:05 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) dup2(0xffffffffffffffff, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="00fb5a02053e76df9aeadf7592108b3466dd38be85fa65f051dc1f141abdfd4306116c20ac5e33f285a35193b2bce3a43587c78e18895b13d944494ae675edb9042e8d8ab482321517be1ab40500000061353f8d221ce2832575cd0ac6b7abb8098677f96a278f7875a872d8f0b3347569ba0d1ad7a980e0a662f258ba29e3eb71ad4487347de85860140f46f69becd8585f58ea690295cd4c5d5965ac99bf38006bfafbffffff7f000000005e261c59a1844c325633f18fb2996da768a114edcbcc9d942573be66d33e7b25c57b6a763078b485bf9c98271771bb17a370fe7bfb916223352ba0c8d54b76f31ecdbad611e36daba4ea019c7394ca0100000077623a1d60dc30c5eec86bfb5f010bac0000000000000000000000f0716365d3f88e43958aa5ac188b09fcf8989e15799dcdc81fb2b2286f0f45f59576d6534a6e97746bb6f58b4b031cb2bf769475047cea2a72f14967b10dbb345256c61a70a084e7acb3ea9ae55a0d64eaf0e1000000"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 18:45:05 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 18:45:06 executing program 3: 18:45:06 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\xff', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1451.512581][T31852] devpts: called with bogus options 18:45:06 executing program 3: 18:45:06 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="00fb5a02053e76df9aeadf7592108b3466dd38be85fa65f051dc1f141abdfd4306116c20ac5e33f285a35193b2bce3a43587c78e18895b13d944494ae675edb9042e8d8ab482321517be1ab40500000061353f8d221ce2832575cd0ac6b7abb8098677f96a278f7875a872d8f0b3347569ba0d1ad7a980e0a662f258ba29e3eb71ad4487347de85860140f46f69becd8585f58ea690295cd4c5d5965ac99bf38006bfafbffffff7f000000005e261c59a1844c325633f18fb2996da768a114edcbcc9d942573be66d33e7b25c57b6a763078b485bf9c98271771bb17a370fe7bfb916223352ba0c8d54b76f31ecdbad611e36daba4ea019c7394ca0100000077623a1d60dc30c5eec86bfb5f010bac0000000000000000000000f0716365d3f88e43958aa5ac188b09fcf8989e15799dcdc81fb2b2286f0f45f59576d6534a6e97746bb6f58b4b031cb2bf769475047cea2a72f14967b10dbb345256c61a70a084e7acb3ea9ae55a0d64eaf0e1000000"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1451.851869][T31869] devpts: called with bogus options 18:45:06 executing program 3: 18:45:06 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1452.015834][ T26] audit: type=1800 audit(1570992306.679:32069): pid=31875 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17754 res=0 18:45:06 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r3, 0x415, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) sendmsg$unix(r4, &(0x7f0000001680)={&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001600)=[{&(0x7f00000004c0)="04f5734f0dfc79b3e061811ce15a0ef43512c0e3c1131c34b28dcedacfd3b6bc02e85c382f96dc2e348171298f6dc990743e529a34a791870e98bb58c0175c5402871d05676e1f4b62bedb39749a5f08ad895a73a698f91a55f6c6dc7d196b4d5614bd96b64c06c1f88b6daf04a44fa8031c0597665bd66bf1885ec4cb7375aaf9ce52a3541113", 0x87}, {&(0x7f00000003c0)="d174aa6f3711c665c59671f62e3d39eb24ae19af3d0ce2a95a53de98bdcbed476b926b6f3120e5f4cfcebcda582f6f933ecab3bda3de7ece9a", 0x39}, {&(0x7f0000000600)="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", 0x1000}], 0x3, &(0x7f0000001640)=[@rights={{0x18, 0x1, 0x1, [r2, r5]}}], 0x18, 0x20000800}, 0x340480dc) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x208, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4040}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab}]}]}, @TIPC_NLA_BEARER={0xcc, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x28ce}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}, 0x803}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x747}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x80, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1cb9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40084}, 0x20002) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r8, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f00000016c0)={0x8001008, 0xffff2221, 0x2}) 18:45:06 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) kexec_load(0x9, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="78f0f1bb194917baf565a74e393f74302a4ceba13ad2c0bdbf9e9d1442f3e5d50d8da1fb63d970d2eab11ead17515a61d1c5173704c4f523a7e6678f4432823a1e8a3e957040c230875ae39ad87b899f67c61336337bfe741cf65a911fd55f20e87f73e08356f127a380bcab6e1a172ff2a869f0155568e508e3d58a4b9bb00c1ff0af37c7364afce81421ed0fef1ac597c2f62b033746df8eaa6fec13184a47af5c985150aa0cbf7aafeb973e2f252a99a8fb90751f4d87a8327ef713e56bcf4c923178d39320b325b5e0cf218eaa3432478039baa798e42938735be6bc8eed56fbd4e41f", 0xe5, 0xfffffffffffffffb, 0x10001}], 0x1b5740cf82f7a7e8) lseek(r1, 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000000c0)={0xd, 0x16, {0x57, 0xfff7, 0x491, {0x4, 0x7e50}, {0x0, 0xfffb}, @ramp={0x20, 0x401, {0x3, 0x98ed, 0x7, 0xffff}}}, {0x57, 0x6, 0x3ff, {0x0, 0x5}, {0x6, 0x2}, @ramp={0x0, 0x81, {0xff80, 0x4, 0x7, 0x8}}}}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, r3) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000180)) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000000)={0x8001}) [ 1452.359314][T31885] input: syz1 as /devices/virtual/input/input1393 [ 1452.402885][T31886] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1452.417292][T31885] x86/PAT: syz-executor.2:31885 map pfn RAM range req write-combining for [mem 0x57f70000-0x57f70fff], got write-back 18:45:07 executing program 3: [ 1452.448091][T31886] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1452.471366][T31886] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:45:07 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) [ 1452.529766][T31886] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:45:07 executing program 3: 18:45:07 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="00fb5a02053e76df9aeadf7592108b3466dd38be85fa65f051dc1f141abdfd4306116c20ac5e33f285a35193b2bce3a43587c78e18895b13d944494ae675edb9042e8d8ab482321517be1ab40500000061353f8d221ce2832575cd0ac6b7abb8098677f96a278f7875a872d8f0b3347569ba0d1ad7a980e0a662f258ba29e3eb71ad4487347de85860140f46f69becd8585f58ea690295cd4c5d5965ac99bf38006bfafbffffff7f000000005e261c59a1844c325633f18fb2996da768a114edcbcc9d942573be66d33e7b25c57b6a763078b485bf9c98271771bb17a370fe7bfb916223352ba0c8d54b76f31ecdbad611e36daba4ea019c7394ca0100000077623a1d60dc30c5eec86bfb5f010bac0000000000000000000000f0716365d3f88e43958aa5ac188b09fcf8989e15799dcdc81fb2b2286f0f45f59576d6534a6e97746bb6f58b4b031cb2bf769475047cea2a72f14967b10dbb345256c61a70a084e7acb3ea9ae55a0d64eaf0e1000000"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1452.671997][T31886] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:45:07 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r2, r2, 0x0) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r4) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@local, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1, &(0x7f00000004c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@rq={'rq', 0x3d, 0x374}}, {@common=@version_L='version=9p2000.L'}, {@common=@nodevmap='nodevmap'}, {@common=@dfltgid={'dfltgid', 0x3d, r2}}, {@rq={'rq', 0x3d, 0x1}}, {@timeout={'timeout', 0x3d, 0xfff}}, {@rq={'rq', 0x3d, 0xffffffff00000001}}, {@timeout={'timeout', 0x3d, 0xfffffffffffffffe}}], [{@fowner_gt={'fowner>', r4}}, {@dont_measure='dont_measure'}, {@subj_type={'subj_type', 0x3d, ')]'}}, {@uid_eq={'uid', 0x3d, r6}}, {@obj_type={'obj_type', 0x3d, '.cpuset'}}, {@fsmagic={'fsmagic', 0x3d, 0x85}}, {@uid_lt={'uid<', r7}}]}}) r8 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r9, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, r9) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r10, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r10, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1452.725935][T31899] x86/PAT: syz-executor.2:31899 map pfn RAM range req write-combining for [mem 0x58110000-0x58110fff], got write-back [ 1452.746977][T31886] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:45:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x30000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa923, 0x2b, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x0) [ 1452.804840][T31886] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1452.844362][T31886] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:45:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) exit(0x1301) [ 1452.981187][T31909] devpts: called with bogus options 18:45:07 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:45:07 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) io_setup(0x3f, &(0x7f00000001c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x109006, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) [ 1453.164882][ T26] audit: type=1800 audit(1570992307.829:32070): pid=31922 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17522 res=0 [ 1453.333107][T31930] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1453.378327][T31930] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1453.397755][T31930] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1453.443075][T31930] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:45:08 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) fstat(r3, &(0x7f0000000080)) open_by_handle_at(r0, &(0x7f0000000080)={0x8, 0x20000000001}, 0x0) [ 1453.553832][T31930] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1453.579940][T31930] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1453.645579][T31930] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1453.676125][T31930] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:45:08 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x0) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000000)={0x6, 0x3, 0x29c, 0x6, 0x3, 0x0, 0x1}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r3, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r6, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:45:08 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\xff', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:45:08 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 18:45:08 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x2) socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x900}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1453.928331][T31947] devpts: called with bogus options 18:45:08 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xa200, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x3) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x0) ioctl$VIDIOC_G_EDID(r4, 0xc0285628, &(0x7f0000000140)={0x0, 0x8, 0x6, [], &(0x7f0000000100)=0x1}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1454.147174][ T26] audit: type=1800 audit(1570992308.819:32071): pid=31965 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17707 res=0 [ 1454.222477][T31968] x86/PAT: syz-executor.2:31968 map pfn RAM range req write-combining for [mem 0x38be0000-0x38be0fff], got write-back 18:45:09 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\xff', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1454.351632][T31971] x86/PAT: syz-executor.2:31971 map pfn RAM range req write-combining for [mem 0x38bf0000-0x38bf0fff], got write-back 18:45:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='.dev/io\x83\x00', 0x4080, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) 18:45:09 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\xf9', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:45:09 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1454.729080][T31986] input: syz1 as /devices/virtual/input/input1397 18:45:09 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x2, r0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x202020, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$SIOCX25SENDCALLACCPT(r8, 0x89e9) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r7, 0x0, 0x0, @ib={0x1b, 0x1, 0x1, {"bd065052cd7e6205172df3bc245b090f"}, 0x7, 0xffffffff, 0x6}}}, 0x90) r9 = socket$caif_seqpacket(0x25, 0x5, 0x0) recvmmsg(r9, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r9, 0x891a, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e21, @loopback}}) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1454.836984][T31988] input: syz1 as /devices/virtual/input/input1398 18:45:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x600) sendfile(r1, r2, 0x0, 0x10000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x30200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x34, r3, 0x10, 0x70bd2a, 0x0, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x24000055) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') creat(&(0x7f0000000400)='./file0\x00', 0x0) 18:45:09 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 18:45:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev-ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xa77, 0x200402) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f00000000c0)=0x4) 18:45:09 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x7f', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1455.173002][ T26] audit: type=1804 audit(1570992309.839:32072): pid=32011 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir444481713/syzkaller.9eButr/132/file0" dev="sda1" ino=17704 res=1 18:45:09 executing program 3: r0 = socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xffffff7f, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00b80ecdb4cb9f207c804a01a000000480005000a0002000a0ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0) 18:45:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) recvmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r2}) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x5f02, @loopback, 0x8}}, 0x0, 0x401, 0x0, "a48eeef601cc51dc37de8652ab6270136b86f884d7cb8912408b120e31be49f9a00d17a7e2ef9e1f636c1ad1dca39f2509104b74f0aaf622d982c0b9677c33647951aaf704fb9dee7c5987cfe0a9c395"}, 0xd8) [ 1455.273196][ T26] audit: type=1804 audit(1570992309.919:32073): pid=32020 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir444481713/syzkaller.9eButr/132/file0" dev="sda1" ino=17704 res=1 [ 1455.306961][T32019] devpts: called with bogus options 18:45:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x14000, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000002c0)) r2 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r5, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r6) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r7, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) r8 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r8, &(0x7f00000001c0)=""/113, 0x71) r9 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r9, &(0x7f00000001c0)=""/113, 0x71) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r8, r9}, &(0x7f0000000140)=""/210, 0xd2, &(0x7f0000000240)={&(0x7f00000000c0)={'tgr128\x00'}}) 18:45:10 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x8c', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1455.749193][ T26] audit: type=1800 audit(1570992310.149:32074): pid=32035 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17761 res=0 [ 1455.754818][T32040] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:10 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x40c040, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1, 0x0, r1}) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000000)) [ 1455.901778][T32049] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1455.939634][T32050] encrypted_key: insufficient parameters specified 18:45:10 executing program 3: r0 = socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xffffff7f, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000001c008105e00b80ecdb4cb9f207c804a01a000000480005000a0002000a0ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0) [ 1456.026175][T32050] encrypted_key: insufficient parameters specified 18:45:10 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, 0xffffffffffffffff) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 18:45:10 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\xf5', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1456.232914][T32065] devpts: called with bogus options [ 1456.259419][T32066] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. 18:45:11 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1456.467102][ T26] audit: type=1800 audit(1570992311.129:32075): pid=32076 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16641 res=0 18:45:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000100)={0x80000001, 0x0, @value=0x7}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) fcntl$setstatus(r2, 0x4, 0x4400) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={r6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000140)={r6}, 0x8) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000000)=0x200000000) 18:45:11 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\xf6', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1456.824245][T32086] devpts: called with bogus options [ 1456.883710][T32084] input: syz1 as /devices/virtual/input/input1400 18:45:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r2, r2, 0x0) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r4) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@local, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1, &(0x7f00000004c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@rq={'rq', 0x3d, 0x374}}, {@common=@version_L='version=9p2000.L'}, {@common=@nodevmap='nodevmap'}, {@common=@dfltgid={'dfltgid', 0x3d, r2}}, {@rq={'rq', 0x3d, 0x1}}, {@timeout={'timeout', 0x3d, 0xfff}}, {@rq={'rq', 0x3d, 0xffffffff00000001}}, {@timeout={'timeout', 0x3d, 0xfffffffffffffffe}}], [{@fowner_gt={'fowner>', r4}}, {@dont_measure='dont_measure'}, {@subj_type={'subj_type', 0x3d, ')]'}}, {@uid_eq={'uid', 0x3d, r6}}, {@obj_type={'obj_type', 0x3d, '.cpuset'}}, {@fsmagic={'fsmagic', 0x3d, 0x85}}, {@uid_lt={'uid<', r7}}]}}) r8 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r9, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, r9) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r10, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r10, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1457.075746][T32084] input: syz1 as /devices/virtual/input/input1401 18:45:11 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, 0xffffffffffffffff) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 18:45:11 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, 0xffffffffffffffff) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1457.251457][T32103] devpts: called with bogus options 18:45:12 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) prctl$PR_SET_FP_MODE(0x2d, 0x1) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) ioctl$PPPIOCSNPMODE(r6, 0x4008744b, &(0x7f0000000000)={0x80fd}) acct(0x0) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:45:12 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:45:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000180)=0x0) pipe(&(0x7f0000000100)) sched_setparam(r6, &(0x7f00000000c0)=0x1) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1457.470084][T32112] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1457.520962][T32112] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1457.532472][T32117] devpts: called with bogus options [ 1457.544687][T32118] x86/PAT: syz-executor.2:32118 map pfn RAM range req write-combining for [mem 0x670c0000-0x670c0fff], got write-back [ 1457.545360][T32112] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1457.594881][T32112] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1457.624470][T32118] x86/PAT: syz-executor.2:32118 map pfn RAM range req write-combining for [mem 0x5d480000-0x5d480fff], got write-back [ 1457.695714][T32112] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1457.715981][ T26] audit: type=1800 audit(1570992312.379:32076): pid=32126 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17025 res=0 [ 1457.740953][T32112] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1457.787283][T32112] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1457.810543][T32112] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:45:12 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:45:12 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r2, 0xeade, 0x6}, &(0x7f0000000400)=0xc) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1, 0x0, 0xffffffffffffffff}) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x2) r5 = epoll_create1(0x0) r6 = getpgrp(0xffffffffffffffff) r7 = getpid() r8 = getpgid(0xffffffffffffffff) ptrace$getregset(0x4204, r8, 0x1, &(0x7f0000000380)={&(0x7f0000000280)=""/230, 0xe6}) kcmp$KCMP_EPOLL_TFD(r7, r6, 0x7, r5, &(0x7f0000000000)) get_robust_list(r6, &(0x7f0000000180)=&(0x7f0000000140)={&(0x7f0000000000), 0x0, &(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f00000001c0)=0x18) 18:45:12 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="00fb5a02053e76df9aeadf7592108b3466dd38be85fa65f051dc1f141abdfd4306116c20ac5e33f285a35193b2bce3a43587c78e18895b13d944494ae675edb9042e8d8ab482321517be1ab40500000061353f8d221ce2832575cd0ac6b7abb8098677f96a278f7875a872d8f0b3347569ba0d1ad7a980e0a662f258ba29e3eb71ad4487347de85860140f46f69becd8585f58ea690295cd4c5d5965ac99bf38006bfafbffffff7f000000005e261c59a1844c325633f18fb2996da768a114edcbcc9d942573be66d33e7b25c57b6a763078b485bf9c98271771bb17a370fe7bfb916223352ba0c8d54b76f31ecdbad611e36daba4ea019c7394ca0100000077623a1d60dc30c5eec86bfb5f010bac0000000000000000000000f0716365d3f88e43958aa5ac188b09fcf8989e15799dcdc81fb2b2286f0f45f59576d6534a6e97746bb6f58b4b031cb2bf769475047cea2a72f14967b10dbb345256c61a70a084e7acb3ea9ae55a0d64eaf0e1000000"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1458.141070][T32134] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1458.192371][T32134] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1458.248973][T32134] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:45:13 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x101000, 0x0) accept$alg(r4, 0x0, 0x0) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1458.322583][T32134] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1458.391916][T32145] devpts: called with bogus options 18:45:13 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1458.456750][T32134] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:45:13 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x258014, &(0x7f0000000100)=ANY=[@ANYBLOB="78696e6f3d6175746fdf8565749111409e5c3abacbf22cbce43a913ef161636f70793d6f66662c78696e6f3d6f00002c736d61636b66736861743d2f6465762f69536c3a89656d315c47504c27747275737465647d7b656d315c706f7369785f61636c5f616363657373766d6e6574316d643573756d2c7375626a5f726f6c653d2f6408000000000000007375626a5f747970653d2c736d61636b66737472"]) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000001c0)=0x3) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x14100, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r4, @in={{0x2, 0x4e20, @remote}}, 0x73, 0xfff8, 0x2d7e, 0x6, 0x1}, &(0x7f0000000300)=0x98) [ 1458.507750][T32134] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:45:13 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, 0xffffffffffffffff) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1458.550723][T32134] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1458.599717][T32134] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1458.690159][T32158] devpts: called with bogus options 18:45:13 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1458.771789][T32162] devpts: called with bogus options 18:45:13 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @local}}, 0x7, 0xf2}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000180)={r2, 0x20}, 0x8) 18:45:13 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, 0xffffffffffffffff) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1458.888004][ T26] audit: type=1800 audit(1570992313.559:32077): pid=32168 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17025 res=0 [ 1458.946942][T32168] input: syz1 as /devices/virtual/input/input1402 18:45:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x40000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1459.270408][T32176] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1459.298824][T32180] devpts: called with bogus options [ 1459.302571][T32176] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:45:14 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, 0xffffffffffffffff) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1459.344564][T32176] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1459.376516][T32176] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1459.460097][T32176] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1459.493474][T32176] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1459.531619][T32176] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1459.571618][T32192] devpts: called with bogus options 18:45:14 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 18:45:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003200), 0x0, 0x1, 0x0) recvmmsg(r1, &(0x7f0000000f80), 0x4, 0x60, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001180)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r7, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000001200)={0x80000010}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r6, 0x80045300, &(0x7f00000011c0)) r8 = dup(r5) open_tree(r8, &(0x7f00000010c0)='./file0\x00', 0x800) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r12 = dup(r11) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r12, 0x0) ioctl$MON_IOCX_GETX(r12, 0x4018920a, &(0x7f0000001300)={&(0x7f0000001240), &(0x7f0000001280)=""/89, 0x59}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000001100)={{0x72, 0x46, 0x8, 0x2a5d}, 'syz1\x00', 0x2d}) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) r13 = socket(0x11, 0x800000003, 0x0) bind(r13, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r13, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r13, 0x28, 0x1, &(0x7f0000001080)=0x4, 0x8) sendto$inet(r9, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r9, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1459.585098][T32176] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:45:14 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='\x80\x00\x00\x00\x00\xe7\xff\xbf\xff', 0x1, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1459.720279][T32201] devpts: called with bogus options 18:45:14 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1459.786941][ T26] audit: type=1800 audit(1570992314.459:32078): pid=32205 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17043 res=0 18:45:14 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 18:45:14 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1460.170800][T32218] devpts: called with bogus options [ 1460.187028][T32215] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:45:14 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2008000fffffffe) [ 1460.235887][T32215] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1460.271016][T32215] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1460.315977][T32215] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:45:15 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 18:45:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000000c0)) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x2, 0x1, 0x1, r3}) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) [ 1460.439413][T32215] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1460.515235][T32215] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1460.530940][T32231] devpts: called with bogus options [ 1460.545554][T32215] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1460.580031][T32237] x86/PAT: syz-executor.2:32237 map pfn RAM range req write-combining for [mem 0x5e890000-0x5e890fff], got write-back [ 1460.605544][T32215] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1460.641445][T32240] devpts: called with bogus options [ 1460.731950][T32245] input: syz1 as /devices/virtual/input/input1403 [ 1460.852121][T32252] input: syz1 as /devices/virtual/input/input1404 [ 1460.913242][ T26] audit: type=1800 audit(1570992315.509:32079): pid=32252 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17201 res=0 18:45:15 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:45:15 executing program 0: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000300)="fc0000001c000741f490cd011cf2540039ab08000800000003007738210001c000000000000000000c00ff0000039815fa2d1ec28656aaa79bb94b46fe0000000a000200035a02036c6c256f2f272fdf0d11512f3cadd44000000000008934b05cd3f3187a617cd5000010000000002c05defd5a32e280fc444ef92e475ef5b29d3ef399a48a170e5bba4a463ae4f5567a6f91cf190201ded815b2ccd243fa95ed94f5ad91bd0734babc7c6d27392ad23f2eebd16b17e583df150c3b880f411f46a60467b4d57155870271773a580a75e63e06000000c880ac805fa2985fce0d6dbf00a248deac270e33429fd31100"/252, 0x4e4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcd}}, 0x0, 0x43, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x86001) write$cgroup_int(r3, &(0x7f00000000c0)=0xfffffffffffffff8, 0x12) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) recvmmsg(r4, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000200)=0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0xfffffffffffff75d, 0x0, 0x2, 0xfffffffffffffffc, 0xfffffffd}, r5, 0x1, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10810}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x38, r7, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x800}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9100004}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x19c, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xafdac8cfe720fe0d}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xf2dfe8eb73cc19c1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hwsim0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="e970dda7f0611887535c7cea709a406e"}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x73}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xca6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4040094}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r6) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r8, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r8, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:45:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x0) ioctl$TCSBRK(r3, 0x5409, 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) [ 1461.070604][T32256] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1461.252045][T32264] x86/PAT: syz-executor.2:32264 map pfn RAM range req write-combining for [mem 0x39870000-0x39870fff], got write-back [ 1461.280103][T32262] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1461.335408][T32262] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1461.355318][T32262] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1461.370916][T32266] x86/PAT: syz-executor.2:32266 map pfn RAM range req write-combining for [mem 0x56460000-0x56460fff], got write-back 18:45:16 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="00fb5a02053e76df9aeadf7592108b3466dd38be85fa65f051dc1f141abdfd4306116c20ac5e33f285a35193b2bce3a43587c78e18895b13d944494ae675edb9042e8d8ab482321517be1ab40500000061353f8d221ce2832575cd0ac6b7abb8098677f96a278f7875a872d8f0b3347569ba0d1ad7a980e0a662f258ba29e3eb71ad4487347de85860140f46f69becd8585f58ea690295cd4c5d5965ac99bf38006bfafbffffff7f000000005e261c59a1844c325633f18fb2996da768a114edcbcc9d942573be66d33e7b25c57b6a763078b485bf9c98271771bb17a370fe7bfb916223352ba0c8d54b76f31ecdbad611e36daba4ea019c7394ca0100000077623a1d60dc30c5eec86bfb5f010bac0000000000000000000000f0716365d3f88e43958aa5ac188b09fcf8989e15799dcdc81fb2b2286f0f45f59576d6534a6e97746bb6f58b4b031cb2bf769475047cea2a72f14967b10dbb345256c61a70a084e7acb3ea9ae55a0d64eaf0e1000000"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2008000fffffffe) [ 1461.395162][T32262] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:45:16 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2008000fffffffe) 18:45:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x40100, 0x0) write$P9_ROPEN(r1, &(0x7f0000000100)={0x18, 0x71, 0x1, {{0x82, 0x0, 0x8}, 0xcd}}, 0x18) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x2, 0x6}}, 0x30) [ 1461.516485][T32262] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1461.567617][T32262] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1461.591883][T32272] devpts: called with bogus options [ 1461.597492][T32262] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:45:16 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2008000fffffffe) [ 1461.633205][T32262] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:45:16 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1461.771077][T32282] x86/PAT: syz-executor.2:32282 map pfn RAM range req write-combining for [mem 0x5d8e0000-0x5d8e0fff], got write-back [ 1461.819166][T32281] devpts: called with bogus options [ 1461.886601][T32288] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1461.907504][T32287] devpts: called with bogus options [ 1461.913565][T32282] x86/PAT: syz-executor.2:32282 map pfn RAM range req write-combining for [mem 0x38010000-0x38010fff], got write-back [ 1462.016954][T32298] input: syz1 as /devices/virtual/input/input1405 [ 1462.024598][T32295] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:45:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f00000000c0)=r4) 18:45:16 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1462.206042][T32295] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1462.222435][T32295] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1462.292290][T32295] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1462.334099][T32304] x86/PAT: syz-executor.2:32304 map pfn RAM range req write-combining for [mem 0x38020000-0x38020fff], got write-back [ 1462.418165][T32295] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1462.445299][T32295] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1462.458374][T32311] devpts: called with bogus options 18:45:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x19400}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0x5, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2c7) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 18:45:17 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 18:45:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1, 0x0, 0xffffffffffffffff}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f00000000c0)=0x80, 0x4) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000000)={0xe3, 0x10, 0x1, r1}) [ 1462.474166][T32295] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1462.510354][T32295] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1462.604073][T32316] x86/PAT: syz-executor.2:32316 map pfn RAM range req write-combining for [mem 0x38040000-0x38040fff], got write-back 18:45:17 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:45:17 executing program 3: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000300)="fc0000001c000741f490cd011cf2540039ab08000800000003007738210001c000000000000000000c00ff0000039815fa2d1ec28656aaa79bb94b46fe0000000a000200035a02036c6c256f2f272fdf0d11512f3cadd44000000000008934b05cd3f3187a617cd5000010000000002c05defd5a32e280fc444ef92e475ef5b29d3ef399a48a170e5bba4a463ae4f5567a6f91cf190201ded815b2ccd243fa95ed94f5ad91bd0734babc7c6d27392ad23f2eebd16b17e583df150c3b880f411f46a60467b4d57155870271773a580a75e63e06000000c880ac805fa2985fce0d6dbf00a248deac270e33429fd31100"/252, 0x4e4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcd}}, 0x0, 0x43, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x86001) write$cgroup_int(r3, &(0x7f00000000c0)=0xfffffffffffffff8, 0x12) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) recvmmsg(r4, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000200)=0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0xfffffffffffff75d, 0x0, 0x2, 0xfffffffffffffffc, 0xfffffffd}, r5, 0x1, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10810}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x38, r7, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x800}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9100004}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x19c, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xafdac8cfe720fe0d}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xf2dfe8eb73cc19c1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hwsim0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="e970dda7f0611887535c7cea709a406e"}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x73}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xca6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4040094}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r6) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r8, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r8, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1462.703191][T32323] devpts: called with bogus options [ 1462.739426][T32316] x86/PAT: syz-executor.2:32316 map pfn RAM range req write-combining for [mem 0x38050000-0x38050fff], got write-back [ 1462.799036][T32329] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1462.837517][T32334] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1462.847311][T32329] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1462.864128][T32329] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1462.926495][T32339] input: syz1 as /devices/virtual/input/input1406 [ 1462.934060][ T26] audit: type=1800 audit(1570992317.589:32080): pid=32339 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17057 res=0 [ 1463.056738][T32329] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:45:17 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x258014, &(0x7f0000000100)=ANY=[@ANYBLOB="78696e6f3d6175746fdf8565749111409e5c3abacbf22cbce43a913ef161636f70793d6f66662c78696e6f3d6f00002c736d61636b66736861743d2f6465762f69536c3a89656d315c47504c27747275737465647d7b656d315c706f7369785f61636c5f616363657373766d6e6574316d643573756d2c7375626a5f726f6c653d2f6408000000000000007375626a5f747970653d2c736d61636b66737472"]) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000001c0)=0x3) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1000000000a927, 0x1}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x14100, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r4, @in={{0x2, 0x4e20, @remote}}, 0x73, 0xfff8, 0x2d7e, 0x6, 0x1}, &(0x7f0000000300)=0x98) [ 1463.180532][T32329] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1463.207132][T32329] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1463.226442][T32329] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1463.267721][T32329] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:45:18 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:45:18 executing program 2: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1463.539762][T32353] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:45:18 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1463.584568][T32353] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1463.613814][T32356] devpts: called with bogus options 18:45:18 executing program 2: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1463.650509][T32353] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) 18:45:18 executing program 0: r0 = epoll_create1(0x0) r1 = getpgrp(0xffffffffffffffff) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, r0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r5, 0x0) r7 = perf_event_open(&(0x7f000025c000)={0x400000001, 0xffffffffffffffe5, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x979d5a5e4ae7bc75}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0x0) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r6, 0x0) socket$inet6(0xa, 0x800, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r8, 0x0) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r11, 0x415, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80010400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x268, r11, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff0001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x994}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x68, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3879}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff8d4b}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x18}]}, @TIPC_NLA_MEDIA={0x80, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6a7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffba0b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r8) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r12, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r12, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r12, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1463.720476][T32353] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:45:18 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1463.773043][T32361] devpts: called with bogus options [ 1463.828643][T32353] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1463.865190][T32353] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1463.908833][T32353] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1463.951925][ T26] audit: type=1800 audit(1570992318.619:32081): pid=32376 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17217 res=0 [ 1463.974670][T32376] input: syz1 as /devices/virtual/input/input1407 [ 1463.995353][T32353] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1464.004920][T32372] devpts: called with bogus options 18:45:18 executing program 2: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1464.133451][T32379] devpts: called with bogus options 18:45:18 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:45:19 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1464.314567][T32387] devpts: called with bogus options 18:45:19 executing program 2: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000500)='./file0\x00', 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1464.448063][T32391] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1464.475542][T32391] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1464.524900][T32391] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1464.567382][T32391] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1464.589154][T32396] devpts: called with bogus options 18:45:19 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1464.636851][T32399] devpts: called with bogus options [ 1464.674277][T32391] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1464.717859][T32391] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1464.735945][T32391] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1464.810856][ T26] audit: type=1800 audit(1570992319.479:32082): pid=32410 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=17473 res=0 [ 1464.854460][T32391] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1464.901186][T32410] input: syz1 as /devices/virtual/input/input1408 [ 1464.982000][T32395] cgroup: fork rejected by pids controller in /syz2 18:45:19 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r4, 0x28007d) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r4, r4, 0x0, 0x2008000fffffffe) 18:45:19 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_config_ext={0x10001, 0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$unix(0xffffffffffffffff, &(0x7f0000000140)="4fed4d0ec6e016efaf9c1fb7fb5988bcb0778b5ed3094abfd2d0aeee213619df8109040af393078028fcec57b43f6999d14ada7fe56b95d20f22ad3245070031bb41129fb92a0e5b81a964200f3e39d3585bf9c4c0b626e4baf72f64261277cbe19bef9aad7d5e89395608284a050e9ec09f63c4f8e1b665f3bd011daeee9de8266c6d571ba12949f177410b22ef99242eb05c4d", 0x94, 0x2000800, 0x0, 0x0) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1465.108081][T32515] devpts: called with bogus options [ 1465.124686][T32518] devpts: called with bogus options 18:45:19 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r4, 0x28007d) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r4, r4, 0x0, 0x2008000fffffffe) 18:45:19 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 18:45:19 executing program 2: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000500)='./file0\x00', 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 18:45:19 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000500)='./file0\x00', 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1465.394719][T32533] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1465.404446][T32532] devpts: called with bogus options [ 1465.431864][T32536] devpts: called with bogus options [ 1465.439558][T32535] devpts: called with bogus options [ 1465.455398][T32533] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1465.486399][T32533] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1465.520602][T32533] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 18:45:20 executing program 2: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000500)='./file0\x00', 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1465.563426][ T26] audit: type=1800 audit(1570992320.229:32083): pid=32544 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16594 res=0 [ 1465.629397][T32544] input: syz1 as /devices/virtual/input/input1409 [ 1465.706894][T32546] input: syz1 as /devices/virtual/input/input1410 [ 1465.976988][ T26] audit: type=1800 audit(1570992320.319:32084): pid=32546 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16569 res=0 18:45:20 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1466.131914][T32559] devpts: called with bogus options 18:45:20 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1a4, 0x2280) ioctl$TIOCCBRK(r4, 0x5428) 18:45:20 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r4, 0x28007d) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="00fb5a02053e76df9aeadf7592108b3466dd38be85fa65f051dc1f141abdfd4306116c20ac5e33f285a35193b2bce3a43587c78e18895b13d944494ae675edb9042e8d8ab482321517be1ab40500000061353f8d221ce2832575cd0ac6b7abb8098677f96a278f7875a872d8f0b3347569ba0d1ad7a980e0a662f258ba29e3eb71ad4487347de85860140f46f69becd8585f58ea690295cd4c5d5965ac99bf38006bfafbffffff7f000000005e261c59a1844c325633f18fb2996da768a114edcbcc9d942573be66d33e7b25c57b6a763078b485bf9c98271771bb17a370fe7bfb916223352ba0c8d54b76f31ecdbad611e36daba4ea019c7394ca0100000077623a1d60dc30c5eec86bfb5f010bac0000000000000000000000f0716365d3f88e43958aa5ac188b09fcf8989e15799dcdc81fb2b2286f0f45f59576d6534a6e97746bb6f58b4b031cb2bf769475047cea2a72f14967b10dbb345256c61a70a084e7acb3ea9ae55a0d64eaf0e1000000"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r4, r4, 0x0, 0x2008000fffffffe) [ 1466.235522][T32563] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1466.323075][ T26] audit: type=1800 audit(1570992320.989:32085): pid=32569 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16673 res=0 [ 1466.396103][T32569] input: syz1 as /devices/virtual/input/input1411 [ 1466.452716][T32563] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:45:21 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000500)='./file0\x00', 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 18:45:21 executing program 2: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r4, 0x28007d) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r4, r4, 0x0, 0x2008000fffffffe) [ 1466.522612][T32563] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1466.580303][T32674] devpts: called with bogus options [ 1466.615347][T32563] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1466.707323][T32681] devpts: called with bogus options [ 1466.726502][T32682] devpts: called with bogus options [ 1466.750313][ T26] audit: type=1800 audit(1570992321.419:32086): pid=32688 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16576 res=0 [ 1466.776671][T32688] input: syz1 as /devices/virtual/input/input1412 18:45:21 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000500)='./file0\x00', 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) 18:45:21 executing program 2: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r4, 0x28007d) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r4, r4, 0x0, 0x2008000fffffffe) 18:45:21 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007800000000300000000000000e00000016000000020000000200000002020000000000f10d000000000400000004000000080000000c00000010000002140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 1467.042372][T32692] devpts: called with bogus options 18:45:21 executing program 2: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r4, 0x28007d) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r6, r5) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x6) stat(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r4, r4, 0x0, 0x2008000fffffffe) [ 1467.094414][T32696] devpts: called with bogus options 18:45:21 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r7, r6) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="00fb5a02053e76df9aeadf7592108b3466dd38be85fa65f051dc1f141abdfd4306116c20ac5e33f285a35193b2bce3a43587c78e18895b13d944494ae675edb9042e8d8ab482321517be1ab40500000061353f8d221ce2832575cd0ac6b7abb8098677f96a278f7875a872d8f0b3347569ba0d1ad7a980e0a662f258ba29e3eb71ad4487347de85860140f46f69becd8585f58ea690295cd4c5d5965ac99bf38006bfafbffffff7f000000005e261c59a1844c325633f18fb2996da768a114edcbcc9d942573be66d33e7b25c57b6a763078b485bf9c98271771bb17a370fe7bfb916223352ba0c8d54b76f31ecdbad611e36daba4ea019c7394ca0100000077623a1d60dc30c5eec86bfb5f010bac0000000000000000000000f0716365d3f88e43958aa5ac188b09fcf8989e15799dcdc81fb2b2286f0f45f59576d6534a6e97746bb6f58b4b031cb2bf769475047cea2a72f14967b10dbb345256c61a70a084e7acb3ea9ae55a0d64eaf0e1000000"], 0x1, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000500)='./file0\x00', 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3ff}, 0x1, 0x1, 0x8001, 0x7f, 0x0, 0x0, 0x7}) sendfile(r5, r5, 0x0, 0x2008000fffffffe) [ 1467.145655][T32701] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1467.178426][T32701] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 18:45:21 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xeffe8cdf96bc1ccb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, r2, r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1467.215710][T32701] F2FS-fs (loop1): Wrong NAT boundary, start(3072) end(4096) blocks(263168) [ 1467.267384][T32701] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1467.288614][T32706] devpts: called with bogus options [ 1467.368641][T32701] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1467.394584][T32701] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1467.406330][ T26] audit: type=1800 audit(1570992322.079:32087): pid=32715 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16567 res=0 [ 1467.433814][T32715] input: syz1 as /devices/virtual/input/input1413 [ 1467.448833][T32715] ------------[ cut here ]------------ [ 1467.454933][T32715] refcount_t: increment on 0; use-after-free. [ 1467.461641][T32715] WARNING: CPU: 0 PID: 32715 at lib/refcount.c:156 refcount_inc_checked+0x61/0x70 [ 1467.470849][T32715] Kernel panic - not syncing: panic_on_warn set ... [ 1467.477485][T32715] CPU: 0 PID: 32715 Comm: syz-executor.2 Not tainted 5.4.0-rc2+ #0 [ 1467.485367][T32715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1467.495414][T32715] Call Trace: [ 1467.498702][T32715] dump_stack+0x172/0x1f0 [ 1467.503038][T32715] ? refcount_inc_not_zero_checked+0x180/0x200 [ 1467.509182][T32715] panic+0x2e3/0x75c [ 1467.513236][T32715] ? add_taint.cold+0x16/0x16 [ 1467.517938][T32715] ? __kasan_check_write+0x14/0x20 [ 1467.523040][T32715] ? __warn.cold+0x14/0x35 [ 1467.527461][T32715] ? refcount_inc_checked+0x61/0x70 [ 1467.532645][T32715] __warn.cold+0x2f/0x35 [ 1467.536919][T32715] ? refcount_inc_checked+0x61/0x70 [ 1467.542139][T32715] report_bug+0x289/0x300 [ 1467.546462][T32715] do_error_trap+0x11b/0x200 [ 1467.551041][T32715] do_invalid_op+0x37/0x50 [ 1467.555465][T32715] ? refcount_inc_checked+0x61/0x70 [ 1467.560664][T32715] invalid_op+0x23/0x30 [ 1467.564808][T32715] RIP: 0010:refcount_inc_checked+0x61/0x70 [ 1467.570633][T32715] Code: 1d 32 eb 7f 06 31 ff 89 de e8 0b 1f 31 fe 84 db 75 dd e8 c2 1d 31 fe 48 c7 c7 60 60 e6 87 c6 05 12 eb 7f 06 01 e8 47 62 02 fe <0f> 0b eb c1 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 [ 1467.590346][T32715] RSP: 0018:ffff88805cf9f8b8 EFLAGS: 00010282 [ 1467.596410][T32715] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1467.604371][T32715] RDX: 0000000000017a0a RSI: ffffffff815cb5a6 RDI: ffffed100b9f3f09 [ 1467.612329][T32715] RBP: ffff88805cf9f8c8 R08: ffff88805296c240 R09: fffffbfff14ee338 [ 1467.620320][T32715] R10: fffffbfff14ee337 R11: ffffffff8a7719bf R12: ffff88803acde640 [ 1467.628596][T32715] R13: 0000000000000000 R14: ffff8880a1986340 R15: ffff88809b981f00 [ 1467.636604][T32715] ? vprintk_func+0x86/0x189 [ 1467.641338][T32715] ? refcount_inc_checked+0x61/0x70 [ 1467.646547][T32715] kobject_get+0x66/0xc0 [ 1467.650795][T32715] cdev_get+0x60/0xb0 [ 1467.654777][T32715] chrdev_open+0xb0/0x6b0 [ 1467.659100][T32715] ? cdev_put.part.0+0x50/0x50 [ 1467.663858][T32715] ? security_file_open+0x87/0x300 [ 1467.668965][T32715] do_dentry_open+0x4df/0x1250 [ 1467.673718][T32715] ? __kasan_check_read+0x11/0x20 [ 1467.678739][T32715] ? cdev_put.part.0+0x50/0x50 [ 1467.683501][T32715] ? chown_common+0x5c0/0x5c0 [ 1467.688185][T32715] ? inode_permission+0xb4/0x560 [ 1467.693115][T32715] vfs_open+0xa0/0xd0 [ 1467.697099][T32715] path_openat+0x10e9/0x46d0 [ 1467.701683][T32715] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1467.707477][T32715] ? kasan_slab_alloc+0xf/0x20 [ 1467.712316][T32715] ? kmem_cache_alloc+0x121/0x710 [ 1467.717358][T32715] ? getname_flags+0xd6/0x5b0 [ 1467.722034][T32715] ? getname+0x1a/0x20 [ 1467.726099][T32715] ? do_sys_open+0x2c9/0x5d0 [ 1467.730692][T32715] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1467.736091][T32715] ? __alloc_fd+0x487/0x620 [ 1467.740601][T32715] do_filp_open+0x1a1/0x280 [ 1467.745124][T32715] ? may_open_dev+0x100/0x100 [ 1467.749802][T32715] ? __kasan_check_read+0x11/0x20 [ 1467.754818][T32715] ? do_raw_spin_unlock+0x57/0x270 [ 1467.759935][T32715] ? _raw_spin_unlock+0x2d/0x50 [ 1467.764787][T32715] ? __alloc_fd+0x487/0x620 [ 1467.769291][T32715] do_sys_open+0x3fe/0x5d0 [ 1467.773703][T32715] ? filp_open+0x80/0x80 [ 1467.777942][T32715] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1467.783388][T32715] ? do_syscall_64+0x26/0x760 [ 1467.788056][T32715] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1467.794106][T32715] ? do_syscall_64+0x26/0x760 [ 1467.798807][T32715] __x64_sys_open+0x7e/0xc0 [ 1467.803301][T32715] do_syscall_64+0xfa/0x760 [ 1467.807795][T32715] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1467.813672][T32715] RIP: 0033:0x413941 [ 1467.817557][T32715] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1467.837237][T32715] RSP: 002b:00007ff4419437a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1467.845636][T32715] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413941 [ 1467.853594][T32715] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ff441943850 [ 1467.861553][T32715] RBP: 000000000075c070 R08: 000000000000000f R09: 0000000000000000 [ 1467.869514][T32715] R10: 0000000000000000 R11: 0000000000000293 R12: 00007ff4419446d4 [ 1467.877481][T32715] R13: 00000000004c9086 R14: 00000000004e0548 R15: 00000000ffffffff [ 1467.887381][T32715] Kernel Offset: disabled [ 1467.891949][T32715] Rebooting in 86400 seconds..