[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.48' (ECDSA) to the list of known hosts. 2020/05/05 01:16:22 fuzzer started 2020/05/05 01:16:22 dialing manager at 10.128.0.105:34925 2020/05/05 01:16:23 syscalls: 2941 2020/05/05 01:16:23 code coverage: enabled 2020/05/05 01:16:23 comparison tracing: enabled 2020/05/05 01:16:23 extra coverage: extra coverage is not supported by the kernel 2020/05/05 01:16:23 setuid sandbox: enabled 2020/05/05 01:16:23 namespace sandbox: enabled 2020/05/05 01:16:23 Android sandbox: enabled 2020/05/05 01:16:23 fault injection: enabled 2020/05/05 01:16:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/05/05 01:16:23 net packet injection: enabled 2020/05/05 01:16:23 net device setup: enabled 2020/05/05 01:16:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/05/05 01:16:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/05/05 01:16:23 USB emulation: /dev/raw-gadget does not exist 01:18:53 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0xa, @pix={0x2, 0x3, 0x20493859, 0x2, 0x984fcf2, 0x3, 0xc, 0xffffc62b, 0x1, 0x8, 0x1, 0x2}}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000180)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cachefiles\x00', 0x3000, 0x0) fdatasync(r2) syz_open_dev$sndmidi(&(0x7f0000000400)='/dev/snd/midiC#D#\x00', 0x5, 0x101000) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000440)={0x7, {0xd4, 0x4, 0x2}}) r3 = socket$phonet(0x23, 0x2, 0x1) fcntl$setown(r3, 0x8, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000480)={@mcast2, 0x9, 0x2, 0x1, 0x1, 0x7ffa, 0x2}, 0x20) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000500)={0x2, "8d738f4b49d310df8e0115df6361bdf57f04b29a761c41ebe1c12f656ea7cdb5", 0x1, 0x1}) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000580)={'macvlan0\x00', @ifru_settings={0x7ff, 0x401, @te1=&(0x7f0000000540)={0x9, 0x400, 0x93f, 0x6}}}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f00000005c0)={0x0, "c313650a3fe71841350e860f766633db2ebdefa83c2864adb96f7c01fb3fcf35", 0x2}) keyctl$session_to_parent(0x12) setxattr$security_selinux(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='security.selinux\x00', &(0x7f0000000680)='system_u:object_r:tape_device_t:s0\x00', 0x23, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/vmstat\x00', 0x0, 0x0) io_submit(0x0, 0x6, &(0x7f0000000c80)=[&(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x400, 0xffffffffffffffff, &(0x7f0000000780)="3a81ca92c1fd0fe9883b6d7038468d30e8b4856a57b1fa9f3a25792e110d87533f363165457b6b2a21c4515c01628ac8c9e7fcc06ba35e58578341123c4c0ba2577924c2f5b86fb517b3d0a49cfada16", 0x50, 0x9, 0x0, 0x3, r1}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x6, 0x3ff, 0xffffffffffffffff, &(0x7f0000000840)="287ff70378dccda4d4926d2e7ab7e204553eff3302ddcba5b748e08ee02b4500970f26a7d9fe5f14b29d70c5c9ffb1c753c2b001314ede0b4dbda3eff938ed22e43242a0260c2326fdc750", 0x4b, 0x1, 0x0, 0x3}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, r5, &(0x7f0000000900)="7a3ce63e8f44077374", 0x9, 0x34c, 0x0, 0x1}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x5, 0x2, 0xffffffffffffffff, &(0x7f0000000a00)="c24b9be08ec6dd1a23f357773aa0653a85f7d2e2d884df5b8e6b47395bba8502686fbd2bad49314073059a538abd2f7fd8e0012073d60fddeff7bc606c860c14ddb87f22fe3410a79af075ca1152baa7c63d8aa77ad2906f06360a412768e6849b5909d9168727af5846c38c4a8f5196b3ed7d54c96066919d7cab1b9842848cd2fbb91554a8a9802981b617b43aac2f03b5d0cf20e7f4ca0299dd22876e745781ff", 0xa2, 0x5}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x3, 0x5, 0xffffffffffffffff, &(0x7f0000000b40)="7697471b16d5cffada98953372fda815e56db058e135f4f6345de7c9bef4975d8cfb520d0db4b9326dc12e779b9d8a54c084cfe3d0c9f5", 0x37, 0x37, 0x0, 0x2}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x2, 0x5, r0, &(0x7f0000000bc0)="c96e8aa4dc2e64f3d76128278b05ab3cb8cfb9fd5a3032805d621c252822a6e8f23636a109dc2360bfd97081ed3635b5b013fe4a7f9ce4c6dd32c6805acd36dfd89c9c4f2aae7611623e0613a77700258a0edb6cd29d0e41", 0x58, 0x40, 0x0, 0x3}]) syzkaller login: [ 193.406319] audit: type=1400 audit(1588641533.070:8): avc: denied { execmem } for pid=6446 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 193.504702] IPVS: ftp: loaded support on port[0] = 21 01:18:53 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0xc4080, 0x22) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) fchmod(0xffffffffffffffff, 0x1e7) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x210000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x18, 0x40, 0x2, 0x10, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x6e6bb7, 0x2, {0x6, 0x2b, 0x7, 0x2, 0x0, 0x1, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@loopback}}, @sadb_key={0x6, 0x9, 0x140, 0x0, "77c5842b2648361d732978e8feabdbbc32bbba7111a67a51f46f4a284b406f6faa5937d79f7654b1"}]}, 0x80}}, 0x8c0) r2 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0xffffffff80000000, 0x400040) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000240)={0x2, 0x6865, [{0x3e6, 0x0, 0x3ff}, {0x3, 0x0, 0xfffffffffffffff9}]}) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000280)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000002c0)={0x60, 0xa, 0x4, 0x1000, 0x7fffffff, {0x77359400}, {0x5, 0x8, 0xff, 0x8, 0x7f, 0x3, "f4877a17"}, 0x8c41e1f, 0x4, @fd, 0x4, 0x0, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000340)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x148, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_MARK_MASK={0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x401, 0x5, 0x8, 0x0, 0x652d, 0xffff]}, @CTA_TUPLE_REPLY={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @ipv4={[], [], @local}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x20, 0x17, [0x7fff, 0xf4, 0x101, 0x4, 0x7, 0x7ff, 0x59]}, @CTA_TUPLE_ORIG={0x78, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x18}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, [], 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x2004c041}, 0x4800) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nvram\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r5, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xd8a2}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40) r6 = syz_open_dev$mouse(&(0x7f0000000740)='/dev/input/mouse#\x00', 0x6, 0x24100) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}}, 0x4000894) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000880)='statm\x00') setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f00000008c0)=0xa0, 0x2) [ 193.670266] chnl_net:caif_netlink_parms(): no params data found [ 193.830757] IPVS: ftp: loaded support on port[0] = 21 [ 193.838293] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.845618] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.861630] device bridge_slave_0 entered promiscuous mode 01:18:53 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x1c000, 0x0) getdents(r0, &(0x7f0000000040)=""/12, 0xc) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x0) dup2(0xffffffffffffffff, r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(r1, r2) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x4000, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={r5}) r6 = socket$bt_bnep(0x1f, 0x3, 0x4) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x400300, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x200001, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f0000000200)={0x4, 0x6, 0x594e8a93, 0x0, 0xe}) syncfs(0xffffffffffffffff) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCSMRU1(r10, 0x40047452, &(0x7f00000002c0)=0x81) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000300)={0x5d1f, 0x9, 0x4, 0x1000000, 0x2, {}, {0x5, 0x1, 0x2, 0x3, 0x8, 0x80, "da45e5a4"}, 0x200, 0x3, @offset=0x9, 0x3, 0x0, r9}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r11, 0x28, 0x0, &(0x7f0000000380)=0x80000001, 0x8) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000400)={{0x2, @addr=0x2}, 0x8, 0x6, 0x100000000}) [ 193.883789] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.890447] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.899486] device bridge_slave_1 entered promiscuous mode [ 193.966810] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 193.991587] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.105796] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 194.115703] team0: Port device team_slave_0 added [ 194.144920] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 194.152312] team0: Port device team_slave_1 added [ 194.175413] chnl_net:caif_netlink_parms(): no params data found [ 194.199887] batman_adv: batadv0: Adding interface: batadv_slave_0 01:18:53 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x2a00c3, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000040)={0xe, {0x8, 0x7, 0x7, 0xf4, "5192213c46a304aa3d4e91d143b75b6735cea300d92f5b863394a7952e0e17c7e9c4b8331ff0a86d65d63409bc9495056441446320443d44913de46f0b3e22a7e1c1d23234ba328b0f2fc77d1db9e55e4d3f371e98e86348b0b9ae1ef937843899706092abe1f43611167d79ea7f21f9015eaece2860cb10d2d03c95aceacd99cffce910fe5d454a3d6746c2009436e50d0d27d1feccb8024dc8885037faa5155550df4c7cf5da782d0b42b1d51884788eb4eec48300d56e00c1f78fe171cb9c9ed3f5c6ad7481dcf44770bdad46cb0737817d744f787fbf225d9efb1c56de945695fdcee8309315b8309a4f02f2c42303d24b0d"}}, 0x100) sendto$x25(r0, &(0x7f0000000140)="cb98db63d3a5ef33199d6ef1e73de91c6e2a64f7afac128dbcc80a86723c6af93c369c706cebdf930f98308a3aa3cc78b01dabf2ee599c85df67f610c486dc448f4091af80277efb09970fee021b30cf59ddc01d300be59320c9969079425f4519b9380823a008bd42e6e75e1edb345a2108b5db51aa98610939d791436fba301c0464cd0739d3ca2bbcca9e2b1d526a09faba24796c7e17de63044b8b78f013fe515c4389c040b4780a24935cf68cd69f3e7342b29fa285a796d4752b", 0xbd, 0xc010, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x7fff, 0x9}, &(0x7f0000000300)=0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={r1, 0x8000}, &(0x7f0000000380)=0x8) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000003c0)="7b619f968260f8c94328be44f6b7ef87", 0x10) syz_open_dev$binderN(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000440), &(0x7f0000000480)=0x4) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f00000004c0)=0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000500)='nodev^eth1nodev-nodev{*system\\posix_acl_access!$\x00'}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000680)=0xe8) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0)={r2, r3}, 0xc) r4 = getpid() waitid(0x1, r4, &(0x7f0000000700), 0x40000000, &(0x7f0000000780)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000840)='/dev/vsock\x00', 0x2200, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000880)=0x0) sched_getaffinity(r5, 0x8, &(0x7f00000008c0)) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900)='/dev/vcsu\x00', 0x8002, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000940), &(0x7f0000000980)=0x4) openat$pidfd(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/self\x00', 0x420500, 0x0) [ 194.206759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.233666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.259660] IPVS: ftp: loaded support on port[0] = 21 [ 194.262441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.274609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.302834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.339311] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 194.358370] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 01:18:54 executing program 4: ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x8, 0x9, 0x4, 0x70000, 0x3f, {0x0, 0x2710}, {0x3, 0x0, 0x8a, 0x6, 0x1f, 0x5b, "2282bf4e"}, 0x5, 0x3, @fd, 0x3, 0x0, 0xffffffffffffffff}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xff, 0x4, 0x1, r1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x3, {0xa, 0x4e24, 0x75, @empty, 0xffffffff}, r2}}, 0x38) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000240)={0x3, 0x3, 0x4, 0x40, 0xc25, {r3, r4/1000+10000}, {0x1, 0xc, 0x7f, 0x1, 0x20, 0xb8, "73b68e62"}, 0x0, 0x1, @userptr=0x1, 0x3, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x7, &(0x7f0000000340)=0x3) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) capget(&(0x7f00000003c0)={0x20080522, r6}, &(0x7f0000000400)={0x3, 0x400, 0x9, 0x5, 0x10000, 0x5}) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000440)) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480)='/dev/input/mice\x00', 0x1) setsockopt$inet_dccp_int(r7, 0x21, 0x6, &(0x7f00000004c0)=0xbdcf, 0x4) r8 = syz_open_dev$mouse(&(0x7f0000000500)='/dev/input/mouse#\x00', 0x0, 0x511802) ioctl$MON_IOCG_STATS(r8, 0x80089203, &(0x7f0000000540)) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x202100, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r9, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000640)={0x248, r10, 0x1, 0x4, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9ea}]}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe3b0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffe768}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa1b3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe2b8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa92}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xded}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @mcast1, 0xf013}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @mcast2, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xfffffff8, @mcast2, 0x6}}}}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x40800}, 0x4004040) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000a40)={&(0x7f0000000980)=[0x6, 0xc009, 0x5, 0x7ff, 0x4, 0x8, 0x5], 0x7, 0xc0800, 0x0, r9}) [ 194.466342] device hsr_slave_0 entered promiscuous mode [ 194.503009] device hsr_slave_1 entered promiscuous mode [ 194.546963] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 194.551591] IPVS: ftp: loaded support on port[0] = 21 [ 194.570803] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 194.676766] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.685989] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.704526] device bridge_slave_0 entered promiscuous mode [ 194.756165] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.766014] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.786284] device bridge_slave_1 entered promiscuous mode 01:18:54 executing program 5: setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}}, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x1) getpeername(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000240)=0x80) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000280)=0x7f, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x41, 0x0) connect$pppoe(r2, &(0x7f0000000300)={0x18, 0x0, {0x3, @local, 'ip6tnl0\x00'}}, 0x1e) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000340)=0xfffffffe, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x8e4000, 0x0) read$FUSE(r3, &(0x7f00000003c0), 0x1000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0xf3, 0x1000}, 0x8) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000001440)={0xab, 0x10, [0xef2a, 0x10000, 0x80000001, 0x7fff]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000001480)={0x3, 'wg0\x00', {0x2}, 0xfffd}) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000014c0)={'filter\x00'}, &(0x7f0000001540)=0x78) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001580)={r1}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000015c0)={0x0, 0xd3, "c64eb0188ee3a2c8f5020b06c54099211813f39b5f1d41f8fff5a60d38a72b07c8f8c1fb0c9d77b471ce0d5efb65bbb27561e2fb6ab9683b97d8d44b9d3384ad211925688f433e39cc5ecdb55dbbafc4744103127a1ce2c4e6a845d167d869e879ab5304a327d7761c122556c7889bc1c0f4518368e12f0e031975ae7a11d05a681f6c65ba7f679ea2eb4c652d02c9f9a1799e7a4a20e2041df2bdbb20adefc0fe316451bc033b572b5e26e692537845d64a008b36ba04cd3bf256a0a2f80d49f4081dcc85456c40a69de4db305e13c50502df"}, &(0x7f00000016c0)=0xdb) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000001700)={r7, 0x8c9e, 0x1, 0x800, 0x2, 0x9}, &(0x7f0000001740)=0x14) [ 194.898790] IPVS: ftp: loaded support on port[0] = 21 [ 194.968981] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 195.019206] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 195.039098] chnl_net:caif_netlink_parms(): no params data found [ 195.081299] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 195.089366] team0: Port device team_slave_0 added [ 195.124708] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 195.127086] IPVS: ftp: loaded support on port[0] = 21 [ 195.132288] team0: Port device team_slave_1 added [ 195.242066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.249124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.275536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.302509] chnl_net:caif_netlink_parms(): no params data found [ 195.318805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.325870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.352985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.421221] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.431264] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 195.475543] chnl_net:caif_netlink_parms(): no params data found [ 195.545575] device hsr_slave_0 entered promiscuous mode [ 195.583166] device hsr_slave_1 entered promiscuous mode [ 195.629025] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 195.641098] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 195.679326] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 195.723628] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.730061] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.746192] device bridge_slave_0 entered promiscuous mode [ 195.776756] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.784850] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.792093] device bridge_slave_1 entered promiscuous mode [ 195.892047] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 195.925394] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.931842] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.940829] device bridge_slave_0 entered promiscuous mode [ 195.948286] chnl_net:caif_netlink_parms(): no params data found [ 195.960078] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 195.981497] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.988003] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.989034] device bridge_slave_1 entered promiscuous mode [ 196.050049] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.056890] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.066497] device bridge_slave_0 entered promiscuous mode [ 196.085730] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 196.093661] team0: Port device team_slave_0 added [ 196.099836] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 196.110380] team0: Port device team_slave_1 added [ 196.117707] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 196.127849] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 196.136241] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.143097] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.150205] device bridge_slave_1 entered promiscuous mode [ 196.177572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.217284] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 196.225893] team0: Port device team_slave_0 added [ 196.235847] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 196.243653] team0: Port device team_slave_1 added [ 196.268965] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 196.281327] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 196.293199] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.311737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.320683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.346275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.360926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.367692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.393014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.404366] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 196.425517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.432220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.459231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.471327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.478319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.506047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.518233] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 196.531886] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 196.540579] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 196.548491] team0: Port device team_slave_0 added [ 196.557629] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 196.566277] team0: Port device team_slave_1 added [ 196.584883] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 196.594425] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 196.611942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.619664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.630178] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 196.638355] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.667226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.673607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.699734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.745142] device hsr_slave_0 entered promiscuous mode [ 196.773314] device hsr_slave_1 entered promiscuous mode [ 196.835236] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 196.843469] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 196.857136] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.863692] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.870874] device bridge_slave_0 entered promiscuous mode [ 196.887050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.893771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.920703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.933238] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 196.941972] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 196.949309] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.956337] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.963824] device bridge_slave_1 entered promiscuous mode [ 197.005185] device hsr_slave_0 entered promiscuous mode [ 197.042963] device hsr_slave_1 entered promiscuous mode [ 197.109671] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 197.117055] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 197.126984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.135433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.143632] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.150083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.157302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.183691] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 197.196286] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 197.214007] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.250298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 197.266718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.275102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.284315] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.290682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.325861] device hsr_slave_0 entered promiscuous mode [ 197.372949] device hsr_slave_1 entered promiscuous mode [ 197.414138] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.422128] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 197.437472] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 197.465509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.486709] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 197.502337] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 197.528104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.544464] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 197.566086] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 197.574538] team0: Port device team_slave_0 added [ 197.580091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.591279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.614960] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 197.633670] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 197.641120] team0: Port device team_slave_1 added [ 197.656293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.665584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.673773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.732290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.738865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.766795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.779637] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 197.795883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.808935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.816961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.843780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.854499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.862180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.872288] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 197.885146] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.901015] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 197.909353] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 197.920238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.928401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.938486] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 197.944787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.954559] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 197.967703] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.985174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.992237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.011717] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 198.018821] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.037167] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 198.066090] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 198.105591] device hsr_slave_0 entered promiscuous mode [ 198.142958] device hsr_slave_1 entered promiscuous mode [ 198.184407] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 198.200249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.208533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.220014] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.226443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.236493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 198.246843] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 198.265436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.276249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.284361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.291919] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.298334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.308019] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 198.318388] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 198.334017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.343620] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 198.360812] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 198.379043] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 198.388763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.396630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.404249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.412053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.420156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.432331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.460097] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 198.473533] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 198.506455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.517091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.527031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.536362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.544931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.563382] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 198.574140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.585179] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 198.591210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.610805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.619492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.642433] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 198.657086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.674834] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 198.687705] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 198.698083] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 198.709514] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 198.717174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.726187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.735394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.742268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.756267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.765160] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 198.781912] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 198.794017] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.811064] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 198.821210] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 198.840017] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 198.852306] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 198.859384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.868213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.876340] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.882768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.889729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.897195] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.906534] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 198.917967] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 198.926510] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 198.933603] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 198.948841] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 198.957073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.964695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.972485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.981742] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.988283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.996436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 199.004504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 199.012920] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 199.019888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 199.032301] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 199.050695] device veth0_vlan entered promiscuous mode [ 199.059311] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 199.068340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.075651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.082527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.092365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.102489] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 199.109551] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.123408] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 199.131817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.149941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.157173] device veth1_vlan entered promiscuous mode [ 199.166161] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 199.179200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 199.192441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.201321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.209499] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.215919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.224753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.232526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.240915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.249022] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.261662] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 199.274058] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 199.288423] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 199.304689] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 199.311766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.323275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.330252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.338680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.346585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.354939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.363009] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.369381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.379489] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 199.379498] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.380748] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 199.384179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 199.400104] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 199.404336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 199.407211] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 199.407284] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 199.407326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.408228] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 199.420970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 199.490779] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 199.501663] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 199.514166] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 199.524376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.537673] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 199.547205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.556417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.565385] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.571757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.579521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.587363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.595309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.603390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.610864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.618972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.627066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.635410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 199.643787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.651604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.659421] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.665856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.676340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 199.687064] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 199.696724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 199.705912] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 199.717921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.725398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.732223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.740412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.748352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.756730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.764722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.772506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.779346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.786741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.799833] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 199.810379] device veth0_macvtap entered promiscuous mode [ 199.818374] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 199.828378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 199.839841] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 199.848576] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 199.856487] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 199.865813] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 199.876469] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 199.887076] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 199.894827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.902775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.911699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.919607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.926718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.936015] device veth1_macvtap entered promiscuous mode [ 199.942237] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 199.958279] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 199.966713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.978926] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 199.987270] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.996040] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 200.004103] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 200.011411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.019101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.027302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.035734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.046617] device veth0_vlan entered promiscuous mode [ 200.057908] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 200.066015] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 200.077907] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 200.088798] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 200.100916] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 200.109784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.117183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.125699] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.132876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.140451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.148153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.156392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.164663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.172189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.185852] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 200.198147] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 200.209993] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 200.220172] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 200.233036] device veth1_vlan entered promiscuous mode [ 200.246343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.254376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.262087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.271167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.279351] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.285774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.293116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.300688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.310345] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 200.318387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.329531] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 200.336638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.345964] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 200.351991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.364689] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 200.372294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.381669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.390700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.399722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.408403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.420615] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 200.436688] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 200.450882] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 200.458270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.469622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.479677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.488653] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.495069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.501954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.511286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.520713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.533587] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 200.541700] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 200.558064] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 200.568499] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 200.576915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.584911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.591674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.600884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.612200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.627646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.636474] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 200.645011] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 200.655052] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 200.663369] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.670607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.677679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.685013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.693119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.706778] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 200.726385] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 200.733740] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 200.740339] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 200.749281] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 200.778797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.788954] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 200.798493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.841038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.852730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.860405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.871184] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 200.885501] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 200.896922] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 200.924152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.931718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.943769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.951277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.958977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.966578] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.976013] device veth0_vlan entered promiscuous mode [ 200.982427] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 200.989866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.000264] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 201.017252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.025782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.038344] device veth0_macvtap entered promiscuous mode [ 201.051943] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 201.062263] device veth1_vlan entered promiscuous mode [ 201.080394] device veth1_macvtap entered promiscuous mode [ 201.092398] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 201.110469] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 201.120824] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 201.131696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.141218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.155682] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 201.166646] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 201.183276] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 201.192415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 201.204379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.215228] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 201.222135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.229572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 201.237988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.246737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 201.255267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 201.275341] device veth0_macvtap entered promiscuous mode [ 201.281772] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 201.313134] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 201.319897] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 201.329858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.339793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.348052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 201.358020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.368868] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 201.376345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.385599] device veth1_macvtap entered promiscuous mode [ 201.392178] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 201.408699] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 201.417078] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 201.427946] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 201.435752] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 201.443701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 201.451475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 201.466828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.480239] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 201.490795] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 201.507809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.516695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.527437] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 201.535290] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 201.542004] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 201.554248] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 201.566471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 201.574220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.581341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.592288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.600762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.610054] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.617509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.631946] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 201.641902] device veth0_vlan entered promiscuous mode [ 201.650845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 201.661667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.671211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 201.680997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.691189] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 201.698538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.705319] device veth0_vlan entered promiscuous mode [ 201.715792] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 201.730381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 201.740003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 201.754970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.763953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.773446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 201.783515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.793009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 201.804305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.814793] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 201.821649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.833462] device veth1_vlan entered promiscuous mode [ 201.839784] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 201.869964] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.885122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 201.907189] QAT: Invalid ioctl [ 201.913638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 201.923254] device veth1_vlan entered promiscuous mode [ 201.930080] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 201.946318] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 201.955588] QAT: Invalid ioctl [ 201.977265] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 202.007625] QAT: Invalid ioctl [ 202.012257] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 202.019324] QAT: Invalid ioctl 01:19:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="01003a1e2410"}) r2 = socket(0x21, 0x80000, 0x9) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x1, 'syzkaller0\x00', {}, 0x5}) [ 202.035338] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 202.042514] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 202.050478] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 202.057523] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 202.065032] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 202.072298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 202.099994] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 202.119502] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 202.147568] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 202.161741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.175594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.185999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 202.198084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.209371] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 202.221371] device veth0_macvtap entered promiscuous mode [ 202.231378] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 202.244218] device veth0_vlan entered promiscuous mode [ 202.254348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.272577] hrtimer: interrupt took 45169 ns [ 202.285260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.292431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 01:19:02 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = dup(r0) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x123d40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000002c0)=@fragment={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x67}, 0x8) sendmsg$nl_route(r1, &(0x7f0000001840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)=@ipv4_delroute={0x1c, 0x19, 0x200, 0x70bd29, 0x25dfdbfd, {0x2, 0x0, 0x14, 0xbb, 0xfc, 0x0, 0xc8, 0xf, 0x100}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0xe3eff73da8be7414) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x6, &(0x7f0000001640)=[{&(0x7f0000001880)="aa8578811bef0e9d4bf8f3c3ece29350bf1bd69209f8db6591800838ba013c7bbea15699fa70661e481da9", 0x2b, 0x1}, {&(0x7f00000003c0)="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", 0x1000, 0x9c4}, {&(0x7f0000000280)="0da48cf48e5a4c8bdfec23756839e9d482e6104728f7a9146253df94a661e59ec1350409d9daac496d", 0x29, 0x5}, {&(0x7f00000013c0)="0c653a2dbf2467a3f35dd70f2c39bca17b44f290f2c29ebd505fdecd7185e99e382cb4a846facb713f63c5f62207d6c5590094994454cedb14e1c63628cc7e047ffc0547bacd362334adda49fcdf229f2287a111b8d5ecde6e6eb8f45a16fa3595313581a6e8c61a4d138ca5b3b6b37a44057f9b95a0379b771bd847a31130c2f2169e8ef266977b54e0baeb5d236f3da36e1d9e963b3d72e11327ab444a7f693e9382b92a23d6edaa35168c1fb9fee256edb44c10e004f72faa8b5133eba348799e4f518cbfec018c2a3216d37573e897bc223e4ff7b9a2c6faeb582670bb92788d6f8be8aab193dec7b810512cc5", 0xef, 0x2}, {&(0x7f00000014c0)="10ce3ddf212404e911f38ce9203dae05f0ef33f7f065886e7e4bf3d5d32d7666d15d2cd11ffe81c2509d8e5bc43fea41db62f5d05cc2f8ed3d04e56bfdee1f1329fe4003a44b085dc965d65e6ff1ece8d017d549d82dfa107b4263ae498c38e438fc10fa5e4b1f715dc8f54f9e7aaad1e6a3a1cc715256c13e064159ee6e94fe80624011a64393bf1996fe29f4333f711cba25a68f653c3e485efa4b30372522fe2adb634b146bf603a677a60f3a7bc412ff255b6a2f5e81ddb846ce011ac41dd25dc10dbd1b09cadd8a75bf39651e160f58eab0894fc2586711ab0ec1792a749efbe403de", 0xe5, 0x7}, {&(0x7f00000015c0)="63700c6c7fe53e3ecbf867e1f7a22f4dcb83cad96c94c54278ca29c95cb82e62e1f96d708bd78808374841778d7086b71da4c5966c2f174ed7f9969b7faa3d3d652026214463631971d14865ec5d411b50529936cdbb4f1846c4fbe1c2bfebf5b226e6c8288b511f984badeefc8a9ada6849cb98313df360c78c0b680088", 0x7e, 0x7fffffff}], 0x8, &(0x7f0000001700)={[], [{@uid_eq={'uid', 0x3d, r4}}, {@smackfsroot={'smackfsroot', 0x3d, '/keyringvmnet1trusted'}}, {@subj_type={'subj_type', 0x3d, '/dev/ttyprintk\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/sg#\x00'}}, {@dont_appraise='dont_appraise'}]}) [ 202.313511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.331745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.346316] device veth0_macvtap entered promiscuous mode [ 202.355424] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 202.376099] device veth1_macvtap entered promiscuous mode [ 202.384103] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 202.395726] device veth1_vlan entered promiscuous mode [ 202.403659] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 202.429271] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 202.437614] device veth1_macvtap entered promiscuous mode [ 202.445198] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 202.460573] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 202.490074] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 202.507014] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 202.530631] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 202.554466] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 202.564726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 01:19:02 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000007060100000e0000000000000000000011000300686173683a69702c706f72740000000005000400000000000900020073797a3000000000050005000200000005000100060095"], 0x4c}}, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f00000010c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xe0c, 0x1, 0x5, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [{{0x254, 0x1, {{0x0, 0x5}, 0x7, 0x6, 0xfffe, 0xc3f, 0x17, 'syz0\x00', "84cf53402343c34c955db4d7cffc61779517a33faacc025b40700403b6cd0d44", "75690fc545230af05249cfb3d6108bd15665577545c88feb9738e64441fdb3af", [{0x0, 0x74, {0x2, 0x8}}, {0x101, 0x7, {0x1, 0x2}}, {0x1, 0x6, {0x0, 0xfffffffe}}, {0x1, 0x7ff, {0x2, 0x2e0b}}, {0xd8fc, 0x5, {0x3, 0x7}}, {0x5, 0xfffa, {0x2, 0x8}}, {0x1, 0x3, {0x1, 0x5}}, {0x8, 0x8, {0x2, 0x7}}, {0x4, 0x53b4, {0x1, 0x1}}, {0x800, 0x7, {0x2, 0x3}}, {0x73f, 0x5, {0x0, 0x1}}, {0x0, 0x8, {0x3, 0xff}}, {0xc1, 0x5, {0x3, 0x1ff}}, {0xd1, 0x0, {0x3, 0x8000}}, {0x4, 0x7, {0x0, 0x8001}}, {0xe7, 0x8489, {0x0, 0x3}}, {0xfffe, 0x800, {0x2, 0x3}}, {0x800, 0x7, {0x0, 0xfff}}, {0x38c, 0x2, {0x1, 0x10000}}, {0x98f7, 0x7ff, {0x1, 0x4}}, {0x9, 0x6, {0x1, 0x2}}, {0x401, 0xfffb, {0x1}}, {0x4, 0x1, {0x0, 0x9}}, {0xd7, 0x8, {0x3, 0x3}}, {0x3, 0x0, {0x3, 0xb304}}, {0x8, 0x6, {0x0, 0x2}}, {0x81, 0x5, {0x0, 0x2}}, {0x3, 0x81, {0x1, 0x325}}, {0x101, 0x800, {0x0, 0xffff}}, {0x1, 0x7, {0x3}}, {0x5, 0x6, {0x0, 0x8a9e}}, {0x8, 0x5, {0x0, 0x10000}}, {0xad, 0x98, {0x4, 0x6}}, {0x0, 0x2, {0x3, 0xce9d}}, {0x0, 0x5, {0x1, 0xa99b}}, {0x3, 0x8001, {0x3, 0x3}}, {0x81, 0x4, {0x3, 0x7}}, {0x9, 0x3f, {0x0, 0x4}}, {0x1, 0x7fff, {0x3, 0x5ad0000}}, {0xcdf, 0x401, {0x1, 0x7f}}]}}}, {{0x254, 0x1, {{0x2, 0x72}, 0x1, 0x0, 0xfc01, 0xcc44, 0x19, 'syz1\x00', "124ec0fc701a9a3ee56e32a917baf6101b6de0f3f59e683e031517d0f010429d", "a5edb3529b5ec5b0df10c478c175326a04bd6a898b17fdcd74b8154c41001421", [{0x1f, 0x8, {0x1, 0x1e3e}}, {0x401, 0x1, {0x3, 0x81}}, {0x9, 0x400, {0x0, 0x6}}, {0x389, 0x7, {0x0, 0x6}}, {0xffff, 0xd807, {0x2, 0x100}}, {0x9d, 0xff, {0x0, 0x8}}, {0x7fff, 0x101, {0x3}}, {0x9, 0x7f, {0x1, 0x2}}, {0x9, 0x1000, {0x2, 0x200}}, {0x4da8, 0x200, {0x3, 0x3}}, {0xdfb9, 0x6d3d, {0x1, 0x5}}, {0x5, 0x100, {0x3, 0xf3c}}, {0x80, 0xbb, {0x0, 0x6}}, {0x7, 0x9, {0x2, 0xfffffff7}}, {0x229, 0xa49, {0x1, 0x8}}, {0x2, 0x2, {0x1, 0x401}}, {0xa3, 0xfeff, {0x1, 0x3ff}}, {0x2, 0x3, {0x0, 0x5}}, {0xf0ba, 0x4, {0x3, 0x1}}, {0x1, 0x0, {0x3, 0x4}}, {0x1, 0x9, {0x1}}, {0x80, 0x4, {0x0, 0x4}}, {0x7, 0x7}, {0x0, 0x6, {0x0, 0xffff0001}}, {0x0, 0x3, {0x2, 0x9}}, {0x7ff, 0x8000, {0x1, 0x3}}, {0x0, 0x405, {0x2, 0x4}}, {0x3, 0x5, {0x2, 0x8000}}, {0x6, 0x5d, {0x1, 0x9}}, {0x7fff, 0x9, {0x0, 0x7}}, {0x1, 0x0, {0x1, 0x4}}, {0x9a7, 0x2, {0x2, 0x1c}}, {0x1, 0x1, {0x1, 0x3f}}, {0x7, 0x1000, {0x1, 0x32c2}}, {0x2fc, 0x5, {0x1, 0x7fffffff}}, {0x5, 0x7, {0x2, 0x8}}, {0x4, 0x9, {0x2, 0x5}}, {0x7fff, 0x0, {0x2, 0x3}}, {0x1, 0x2, {0x1, 0x6e}}, {0x2ee7, 0x7, {0x1, 0x28}}]}}}, {{0x254, 0x1, {{0x3, 0x5}, 0x4, 0x8, 0x8, 0xfffd, 0x21, 'syz0\x00', "7d61599e67afdaa7297d41655340f039dc6f8ee038a061d9b69aeb307837dbdd", "64cecde0527d59918e490152f4fabe6750a9cef34a96880cfd0570bea1711975", [{0x1, 0xfff8, {0x0, 0x101}}, {0x8, 0x7f, {0x3, 0x1}}, {0xffff, 0x800, {0x2, 0x3ff}}, {0x3ff, 0xffff, {0x1, 0x1}}, {0x5, 0x7ff, {0x0, 0x8}}, {0x8, 0x200, {0x1, 0x80000000}}, {0x0, 0xfff, {0x0, 0x1}}, {0x8, 0x8001, {0x0, 0x6}}, {0x1, 0x1, {0x1, 0x401}}, {0x1, 0x6}, {0x5, 0x2, {0x2, 0x3}}, {0x0, 0x0, {0x2, 0x8}}, {0x3, 0x2, {0x0, 0x5}}, {0x3, 0xff7f, {0x1, 0x76}}, {0x8, 0xfffe, {0x2, 0x6000000}}, {0x3ff, 0x1, {0x1, 0xd5a7}}, {0x6, 0x3, {0x6b4095669e865ec5, 0x5}}, {0x7ff, 0x5, {0x3, 0x200}}, {0x200, 0x7, {0x2, 0x800}}, {0xda, 0x2, {0x1, 0x800}}, {0x6, 0x9, {0x1, 0x3}}, {0x93, 0x4, {0x3}}, {0x8, 0xd0, {0x1, 0x81}}, {0x9, 0x0, {0x1, 0x5}}, {0x2, 0x3, {0x3, 0x10001}}, {0x3a, 0x810d, {0x1, 0x81}}, {0x0, 0x1, {0x1, 0x8}}, {0xff, 0x3, {0x1, 0x4}}, {0x2, 0xaf8e, {0x1, 0x99}}, {0x4, 0x20, {0x1, 0x8}}, {0x5, 0xdf84, {0x1, 0x10000}}, {0x2, 0x4, {0x0, 0xee}}, {0x3ff, 0x3, {0x2, 0x7589}}, {0x5, 0x6, {0x2}}, {0x7, 0x7ff, {0x3, 0x3f}}, {0x1, 0x9, {0x2, 0x80}}, {0x5, 0x453, {0x1, 0xc738}}, {0x8, 0x800, {0x2, 0x9}}, {0x3, 0x5, {0x1, 0x80}}, {0x2, 0x0, {0x1, 0x70}}]}}}, {{0x254, 0x1, {{0x1, 0x101}, 0x5, 0x4, 0x4, 0x40, 0x23, 'syz1\x00', "854f54ebd62a3d55fc0d6103cf991429ecf211099624aced7d9d3400147c1796", "f3e945a95c631c7c74ea3cb3aaebcca09b1436c9de6d66b36b380c6ba543fbcd", [{0x1f, 0x3, {0x2, 0x1}}, {0xb79, 0x4, {0x0, 0x101}}, {0x80, 0x40, {0x1, 0xfffffff9}}, {0x5, 0x0, {0x0, 0x36}}, {0x0, 0x8, {0x1, 0x7fff}}, {0x0, 0x20, {0x0, 0x9}}, {0x1, 0x3, {0x3, 0xf5}}, {0xfffc, 0x3, {0x2, 0xfffffffe}}, {0x1200, 0x9, {0x2, 0x9}}, {0xff, 0x921e, {0x2, 0x1}}, {0x8, 0x4, {0x1, 0x7}}, {0x401, 0x0, {0x3, 0xffffffff}}, {0x8, 0x7, {0x2, 0x10000}}, {0xda, 0x2, {0x2, 0x6}}, {0x7, 0x3ff, {0x2, 0x2}}, {0x38, 0x2, {0x3, 0x7}}, {0x1, 0x401, {0x2, 0x8a4b}}, {0x1ff, 0x5, {0x3, 0x8}}, {0x100, 0x8, {0x1, 0x9}}, {0x4, 0x20, {0x3, 0x3}}, {0x7ae, 0x985, {0x1, 0xfffffff8}}, {0x7, 0x400, {0x0, 0x9}}, {0x4e6d, 0x8, {0x2, 0x8000}}, {0xb5, 0x4, {0x3, 0x20}}, {0x7f, 0x8ce, {0x3, 0x6}}, {0x62, 0x159b, {0x0, 0x2}}, {0x7, 0x7, {0x3, 0x8}}, {0x228, 0x3ff, {0x2, 0xfffffffc}}, {0xfffa, 0xb7e, {0x2, 0x8}}, {0x3, 0xff00, {0x0, 0x20}}, {0x3, 0x187, {0x1, 0x6}}, {0x6, 0x1, {0x3, 0x4}}, {0xae9, 0xffff, {0x0, 0xc3d4}}, {0xfff, 0x800, {0x2, 0x40}}, {0x8001, 0x0, {0x1, 0x4}}, {0x41bb, 0x2, {0x3}}, {0xfff, 0x0, {0x2, 0x6}}, {0x3f, 0x1, {0x2, 0x9}}, {0xfe0, 0x7, {0x1, 0x7}}, {0x15b6, 0xfffb, {0x0, 0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x48, 0xf7, 0x8, 0xbd, 0x6, 'syz1\x00', "73d32574767d70ee3cd9b1c3741865afe4adc503724d60982d5ff8bd2e4db28e", "ba5780299dbb2b0fff7256cb415e8b61dc58a54e9dacb33f021a4644b08a0ea1", [{0xffff, 0x1, {0x1, 0x401}}, {0x2, 0xff, {0x1, 0x24a}}, {0x5, 0x7fff}, {0x3, 0x2d36, {0x2, 0x4daa}}, {0x6146, 0xff, {0x1, 0x92}}, {0x9, 0x10}, {0x8, 0xfff9, {0x3, 0x7}}, {0x2, 0x1, {0x3, 0x6}}, {0x3, 0x5, {0x2, 0x8}}, {0x7fff, 0x8, {0x3, 0x7ff}}, {0x38e, 0x101, {0x0, 0x6e5a}}, {0x2, 0x1ff, {0x1, 0x1}}, {0x3ff, 0x2, {0x2, 0x5}}, {0x8, 0x100, {0x2, 0x1}}, {0x3, 0x6, {0x3, 0x3}}, {0x1ff, 0xa209, {0x1, 0x4}}, {0x1f5e, 0x8, {0x2, 0x101}}, {0x5, 0x2, {0x3, 0x4}}, {0xfffa, 0x2379, {0x2, 0x6}}, {0x3, 0x100, {0x3, 0x7fff}}, {0x1, 0x2, {0x3, 0x4}}, {0x2, 0xa4e, {0x1, 0x40}}, {0xf800, 0x8}, {0x1, 0x9, {0x0, 0x598f9a49}}, {0x0, 0xed, {0x3, 0x3}}, {0x7fff, 0x7fff, {0x2, 0x2}}, {0x393a, 0x8, {0x3}}, {0x5b6, 0x9, {0x0, 0x1}}, {0x3, 0x4, {0x3, 0x6a}}, {0x5e, 0xa900, {0x1, 0x3}}, {0x40, 0x40, {0x0, 0x4}}, {0x3, 0x208f, {0x1, 0x4a}}, {0xdf, 0x6, {0x2, 0x6}}, {0x1bce, 0x51e, {0x2, 0x4f1b}}, {0x7ff, 0x400, {0x3, 0x80000001}}, {0x20, 0x3ff, {0x1, 0x8}}, {0x5, 0x7ce, {0x0, 0x9}}, {0x7, 0x2, {0x3, 0x4}}, {0x9, 0x3, {0x1, 0xffffff80}}, {0xb548, 0x7e, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x2}, 0x5e, 0xf8, 0x1, 0x2, 0x20, 'syz0\x00', "32c86583f089d7a51eaf024fc0c03c968241d43ea158e3bcb90d2aad386200d5", "89d47463433e274a990f71ed5396daf121c6fefb57f9bd324739e8850e2872e3", [{0x1f, 0x7, {0x2, 0xfffff73e}}, {0xfffe, 0x5, {0x3}}, {0x1, 0x1ff, {0x3}}, {0x5, 0x9}, {0x4, 0x1, {0x3, 0x401}}, {0x800, 0x1, {0x3, 0x4}}, {0xff, 0x4, {0x2, 0xfffffff8}}, {0x1, 0x5, {0x0, 0x4}}, {0x1ff, 0x1, {0x0, 0x4}}, {0x6, 0x7fff}, {0x7, 0x1, {0x1, 0x4fb5}}, {0x6, 0x8, {0x2, 0x7f}}, {0x8000, 0xf422, {0x0, 0x4}}, {0x3, 0x400, {0x1, 0x2}}, {0x7, 0xe3, {0x2, 0x3ff}}, {0xffff, 0x1, {0x2, 0x7}}, {0xd7c, 0x0, {0x1, 0x4}}, {0x6, 0x8, {0x0, 0x6}}, {0x8, 0x1, {0x3, 0xb6}}, {0x40, 0x4, {0x0, 0x9}}, {0x6, 0x4, {0x3, 0x2}}, {0x4, 0xfa0f, {0x3, 0x8}}, {0x6, 0x10bb, {0x3, 0x20}}, {0x4, 0x8, {0x3, 0x400}}, {0x6, 0x6, {0x3, 0x200}}, {0x9, 0x400, {0x3, 0x200}}, {0x1ff, 0x2, {0x2}}, {0x2b94, 0x8, {0x2, 0x1}}, {0x4, 0x8, {0x0, 0x80}}, {0x7f, 0x1, {0x0, 0x80000000}}, {0x3, 0x5, {0x2, 0x10000}}, {0x0, 0x1, {0x0, 0x1}}, {0x0, 0x7, {0x3, 0x100}}, {0x41, 0x7ff, {0x3, 0x2}}, {0xe8b1, 0x3, {0x0, 0x4b6fe380}}, {0x7, 0x5, {0x1}}, {0x0, 0x1000, {0x1, 0x10000}}, {0x7fff, 0x4, {0x1, 0xf4}}, {0x5, 0x3, {0x2, 0x1}}, {0x9, 0x40, {0x2, 0x8}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001100)='/dev/btrfs-control\x00', 0x244d00, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x399cf0e9) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x3, 0x4) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) [ 202.598541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.622136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.644204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.658641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.669391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.685524] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 202.693889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.704532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 01:19:02 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000007060100000e0000000000000000000011000300686173683a69702c706f72740000000005000400000000000900020073797a3000000000050005000200000005000100060095"], 0x4c}}, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f00000010c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xe0c, 0x1, 0x5, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [{{0x254, 0x1, {{0x0, 0x5}, 0x7, 0x6, 0xfffe, 0xc3f, 0x17, 'syz0\x00', "84cf53402343c34c955db4d7cffc61779517a33faacc025b40700403b6cd0d44", "75690fc545230af05249cfb3d6108bd15665577545c88feb9738e64441fdb3af", [{0x0, 0x74, {0x2, 0x8}}, {0x101, 0x7, {0x1, 0x2}}, {0x1, 0x6, {0x0, 0xfffffffe}}, {0x1, 0x7ff, {0x2, 0x2e0b}}, {0xd8fc, 0x5, {0x3, 0x7}}, {0x5, 0xfffa, {0x2, 0x8}}, {0x1, 0x3, {0x1, 0x5}}, {0x8, 0x8, {0x2, 0x7}}, {0x4, 0x53b4, {0x1, 0x1}}, {0x800, 0x7, {0x2, 0x3}}, {0x73f, 0x5, {0x0, 0x1}}, {0x0, 0x8, {0x3, 0xff}}, {0xc1, 0x5, {0x3, 0x1ff}}, {0xd1, 0x0, {0x3, 0x8000}}, {0x4, 0x7, {0x0, 0x8001}}, {0xe7, 0x8489, {0x0, 0x3}}, {0xfffe, 0x800, {0x2, 0x3}}, {0x800, 0x7, {0x0, 0xfff}}, {0x38c, 0x2, {0x1, 0x10000}}, {0x98f7, 0x7ff, {0x1, 0x4}}, {0x9, 0x6, {0x1, 0x2}}, {0x401, 0xfffb, {0x1}}, {0x4, 0x1, {0x0, 0x9}}, {0xd7, 0x8, {0x3, 0x3}}, {0x3, 0x0, {0x3, 0xb304}}, {0x8, 0x6, {0x0, 0x2}}, {0x81, 0x5, {0x0, 0x2}}, {0x3, 0x81, {0x1, 0x325}}, {0x101, 0x800, {0x0, 0xffff}}, {0x1, 0x7, {0x3}}, {0x5, 0x6, {0x0, 0x8a9e}}, {0x8, 0x5, {0x0, 0x10000}}, {0xad, 0x98, {0x4, 0x6}}, {0x0, 0x2, {0x3, 0xce9d}}, {0x0, 0x5, {0x1, 0xa99b}}, {0x3, 0x8001, {0x3, 0x3}}, {0x81, 0x4, {0x3, 0x7}}, {0x9, 0x3f, {0x0, 0x4}}, {0x1, 0x7fff, {0x3, 0x5ad0000}}, {0xcdf, 0x401, {0x1, 0x7f}}]}}}, {{0x254, 0x1, {{0x2, 0x72}, 0x1, 0x0, 0xfc01, 0xcc44, 0x19, 'syz1\x00', "124ec0fc701a9a3ee56e32a917baf6101b6de0f3f59e683e031517d0f010429d", "a5edb3529b5ec5b0df10c478c175326a04bd6a898b17fdcd74b8154c41001421", [{0x1f, 0x8, {0x1, 0x1e3e}}, {0x401, 0x1, {0x3, 0x81}}, {0x9, 0x400, {0x0, 0x6}}, {0x389, 0x7, {0x0, 0x6}}, {0xffff, 0xd807, {0x2, 0x100}}, {0x9d, 0xff, {0x0, 0x8}}, {0x7fff, 0x101, {0x3}}, {0x9, 0x7f, {0x1, 0x2}}, {0x9, 0x1000, {0x2, 0x200}}, {0x4da8, 0x200, {0x3, 0x3}}, {0xdfb9, 0x6d3d, {0x1, 0x5}}, {0x5, 0x100, {0x3, 0xf3c}}, {0x80, 0xbb, {0x0, 0x6}}, {0x7, 0x9, {0x2, 0xfffffff7}}, {0x229, 0xa49, {0x1, 0x8}}, {0x2, 0x2, {0x1, 0x401}}, {0xa3, 0xfeff, {0x1, 0x3ff}}, {0x2, 0x3, {0x0, 0x5}}, {0xf0ba, 0x4, {0x3, 0x1}}, {0x1, 0x0, {0x3, 0x4}}, {0x1, 0x9, {0x1}}, {0x80, 0x4, {0x0, 0x4}}, {0x7, 0x7}, {0x0, 0x6, {0x0, 0xffff0001}}, {0x0, 0x3, {0x2, 0x9}}, {0x7ff, 0x8000, {0x1, 0x3}}, {0x0, 0x405, {0x2, 0x4}}, {0x3, 0x5, {0x2, 0x8000}}, {0x6, 0x5d, {0x1, 0x9}}, {0x7fff, 0x9, {0x0, 0x7}}, {0x1, 0x0, {0x1, 0x4}}, {0x9a7, 0x2, {0x2, 0x1c}}, {0x1, 0x1, {0x1, 0x3f}}, {0x7, 0x1000, {0x1, 0x32c2}}, {0x2fc, 0x5, {0x1, 0x7fffffff}}, {0x5, 0x7, {0x2, 0x8}}, {0x4, 0x9, {0x2, 0x5}}, {0x7fff, 0x0, {0x2, 0x3}}, {0x1, 0x2, {0x1, 0x6e}}, {0x2ee7, 0x7, {0x1, 0x28}}]}}}, {{0x254, 0x1, {{0x3, 0x5}, 0x4, 0x8, 0x8, 0xfffd, 0x21, 'syz0\x00', "7d61599e67afdaa7297d41655340f039dc6f8ee038a061d9b69aeb307837dbdd", "64cecde0527d59918e490152f4fabe6750a9cef34a96880cfd0570bea1711975", [{0x1, 0xfff8, {0x0, 0x101}}, {0x8, 0x7f, {0x3, 0x1}}, {0xffff, 0x800, {0x2, 0x3ff}}, {0x3ff, 0xffff, {0x1, 0x1}}, {0x5, 0x7ff, {0x0, 0x8}}, {0x8, 0x200, {0x1, 0x80000000}}, {0x0, 0xfff, {0x0, 0x1}}, {0x8, 0x8001, {0x0, 0x6}}, {0x1, 0x1, {0x1, 0x401}}, {0x1, 0x6}, {0x5, 0x2, {0x2, 0x3}}, {0x0, 0x0, {0x2, 0x8}}, {0x3, 0x2, {0x0, 0x5}}, {0x3, 0xff7f, {0x1, 0x76}}, {0x8, 0xfffe, {0x2, 0x6000000}}, {0x3ff, 0x1, {0x1, 0xd5a7}}, {0x6, 0x3, {0x6b4095669e865ec5, 0x5}}, {0x7ff, 0x5, {0x3, 0x200}}, {0x200, 0x7, {0x2, 0x800}}, {0xda, 0x2, {0x1, 0x800}}, {0x6, 0x9, {0x1, 0x3}}, {0x93, 0x4, {0x3}}, {0x8, 0xd0, {0x1, 0x81}}, {0x9, 0x0, {0x1, 0x5}}, {0x2, 0x3, {0x3, 0x10001}}, {0x3a, 0x810d, {0x1, 0x81}}, {0x0, 0x1, {0x1, 0x8}}, {0xff, 0x3, {0x1, 0x4}}, {0x2, 0xaf8e, {0x1, 0x99}}, {0x4, 0x20, {0x1, 0x8}}, {0x5, 0xdf84, {0x1, 0x10000}}, {0x2, 0x4, {0x0, 0xee}}, {0x3ff, 0x3, {0x2, 0x7589}}, {0x5, 0x6, {0x2}}, {0x7, 0x7ff, {0x3, 0x3f}}, {0x1, 0x9, {0x2, 0x80}}, {0x5, 0x453, {0x1, 0xc738}}, {0x8, 0x800, {0x2, 0x9}}, {0x3, 0x5, {0x1, 0x80}}, {0x2, 0x0, {0x1, 0x70}}]}}}, {{0x254, 0x1, {{0x1, 0x101}, 0x5, 0x4, 0x4, 0x40, 0x23, 'syz1\x00', "854f54ebd62a3d55fc0d6103cf991429ecf211099624aced7d9d3400147c1796", "f3e945a95c631c7c74ea3cb3aaebcca09b1436c9de6d66b36b380c6ba543fbcd", [{0x1f, 0x3, {0x2, 0x1}}, {0xb79, 0x4, {0x0, 0x101}}, {0x80, 0x40, {0x1, 0xfffffff9}}, {0x5, 0x0, {0x0, 0x36}}, {0x0, 0x8, {0x1, 0x7fff}}, {0x0, 0x20, {0x0, 0x9}}, {0x1, 0x3, {0x3, 0xf5}}, {0xfffc, 0x3, {0x2, 0xfffffffe}}, {0x1200, 0x9, {0x2, 0x9}}, {0xff, 0x921e, {0x2, 0x1}}, {0x8, 0x4, {0x1, 0x7}}, {0x401, 0x0, {0x3, 0xffffffff}}, {0x8, 0x7, {0x2, 0x10000}}, {0xda, 0x2, {0x2, 0x6}}, {0x7, 0x3ff, {0x2, 0x2}}, {0x38, 0x2, {0x3, 0x7}}, {0x1, 0x401, {0x2, 0x8a4b}}, {0x1ff, 0x5, {0x3, 0x8}}, {0x100, 0x8, {0x1, 0x9}}, {0x4, 0x20, {0x3, 0x3}}, {0x7ae, 0x985, {0x1, 0xfffffff8}}, {0x7, 0x400, {0x0, 0x9}}, {0x4e6d, 0x8, {0x2, 0x8000}}, {0xb5, 0x4, {0x3, 0x20}}, {0x7f, 0x8ce, {0x3, 0x6}}, {0x62, 0x159b, {0x0, 0x2}}, {0x7, 0x7, {0x3, 0x8}}, {0x228, 0x3ff, {0x2, 0xfffffffc}}, {0xfffa, 0xb7e, {0x2, 0x8}}, {0x3, 0xff00, {0x0, 0x20}}, {0x3, 0x187, {0x1, 0x6}}, {0x6, 0x1, {0x3, 0x4}}, {0xae9, 0xffff, {0x0, 0xc3d4}}, {0xfff, 0x800, {0x2, 0x40}}, {0x8001, 0x0, {0x1, 0x4}}, {0x41bb, 0x2, {0x3}}, {0xfff, 0x0, {0x2, 0x6}}, {0x3f, 0x1, {0x2, 0x9}}, {0xfe0, 0x7, {0x1, 0x7}}, {0x15b6, 0xfffb, {0x0, 0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x48, 0xf7, 0x8, 0xbd, 0x6, 'syz1\x00', "73d32574767d70ee3cd9b1c3741865afe4adc503724d60982d5ff8bd2e4db28e", "ba5780299dbb2b0fff7256cb415e8b61dc58a54e9dacb33f021a4644b08a0ea1", [{0xffff, 0x1, {0x1, 0x401}}, {0x2, 0xff, {0x1, 0x24a}}, {0x5, 0x7fff}, {0x3, 0x2d36, {0x2, 0x4daa}}, {0x6146, 0xff, {0x1, 0x92}}, {0x9, 0x10}, {0x8, 0xfff9, {0x3, 0x7}}, {0x2, 0x1, {0x3, 0x6}}, {0x3, 0x5, {0x2, 0x8}}, {0x7fff, 0x8, {0x3, 0x7ff}}, {0x38e, 0x101, {0x0, 0x6e5a}}, {0x2, 0x1ff, {0x1, 0x1}}, {0x3ff, 0x2, {0x2, 0x5}}, {0x8, 0x100, {0x2, 0x1}}, {0x3, 0x6, {0x3, 0x3}}, {0x1ff, 0xa209, {0x1, 0x4}}, {0x1f5e, 0x8, {0x2, 0x101}}, {0x5, 0x2, {0x3, 0x4}}, {0xfffa, 0x2379, {0x2, 0x6}}, {0x3, 0x100, {0x3, 0x7fff}}, {0x1, 0x2, {0x3, 0x4}}, {0x2, 0xa4e, {0x1, 0x40}}, {0xf800, 0x8}, {0x1, 0x9, {0x0, 0x598f9a49}}, {0x0, 0xed, {0x3, 0x3}}, {0x7fff, 0x7fff, {0x2, 0x2}}, {0x393a, 0x8, {0x3}}, {0x5b6, 0x9, {0x0, 0x1}}, {0x3, 0x4, {0x3, 0x6a}}, {0x5e, 0xa900, {0x1, 0x3}}, {0x40, 0x40, {0x0, 0x4}}, {0x3, 0x208f, {0x1, 0x4a}}, {0xdf, 0x6, {0x2, 0x6}}, {0x1bce, 0x51e, {0x2, 0x4f1b}}, {0x7ff, 0x400, {0x3, 0x80000001}}, {0x20, 0x3ff, {0x1, 0x8}}, {0x5, 0x7ce, {0x0, 0x9}}, {0x7, 0x2, {0x3, 0x4}}, {0x9, 0x3, {0x1, 0xffffff80}}, {0xb548, 0x7e, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x2}, 0x5e, 0xf8, 0x1, 0x2, 0x20, 'syz0\x00', "32c86583f089d7a51eaf024fc0c03c968241d43ea158e3bcb90d2aad386200d5", "89d47463433e274a990f71ed5396daf121c6fefb57f9bd324739e8850e2872e3", [{0x1f, 0x7, {0x2, 0xfffff73e}}, {0xfffe, 0x5, {0x3}}, {0x1, 0x1ff, {0x3}}, {0x5, 0x9}, {0x4, 0x1, {0x3, 0x401}}, {0x800, 0x1, {0x3, 0x4}}, {0xff, 0x4, {0x2, 0xfffffff8}}, {0x1, 0x5, {0x0, 0x4}}, {0x1ff, 0x1, {0x0, 0x4}}, {0x6, 0x7fff}, {0x7, 0x1, {0x1, 0x4fb5}}, {0x6, 0x8, {0x2, 0x7f}}, {0x8000, 0xf422, {0x0, 0x4}}, {0x3, 0x400, {0x1, 0x2}}, {0x7, 0xe3, {0x2, 0x3ff}}, {0xffff, 0x1, {0x2, 0x7}}, {0xd7c, 0x0, {0x1, 0x4}}, {0x6, 0x8, {0x0, 0x6}}, {0x8, 0x1, {0x3, 0xb6}}, {0x40, 0x4, {0x0, 0x9}}, {0x6, 0x4, {0x3, 0x2}}, {0x4, 0xfa0f, {0x3, 0x8}}, {0x6, 0x10bb, {0x3, 0x20}}, {0x4, 0x8, {0x3, 0x400}}, {0x6, 0x6, {0x3, 0x200}}, {0x9, 0x400, {0x3, 0x200}}, {0x1ff, 0x2, {0x2}}, {0x2b94, 0x8, {0x2, 0x1}}, {0x4, 0x8, {0x0, 0x80}}, {0x7f, 0x1, {0x0, 0x80000000}}, {0x3, 0x5, {0x2, 0x10000}}, {0x0, 0x1, {0x0, 0x1}}, {0x0, 0x7, {0x3, 0x100}}, {0x41, 0x7ff, {0x3, 0x2}}, {0xe8b1, 0x3, {0x0, 0x4b6fe380}}, {0x7, 0x5, {0x1}}, {0x0, 0x1000, {0x1, 0x10000}}, {0x7fff, 0x4, {0x1, 0xf4}}, {0x5, 0x3, {0x2, 0x1}}, {0x9, 0x40, {0x2, 0x8}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001100)='/dev/btrfs-control\x00', 0x244d00, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x399cf0e9) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x3, 0x4) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) [ 202.739902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.772648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 01:19:02 executing program 1: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="586f2c000ae59258770c2f565075c17f5d63a149dc118822f9806b6f45292c6e8bcbf658566bbaf7805b3cea37bed946f6b7cc8fca1d2409b05313a57b8beeebc097330e533acfc45952e9e6bdc2dce20ce51d91b384ba6a03f82a234ea8d14f16d2d81c75373db3a45eef"]) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x4602) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x74, 0x2e, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0xc}, {0xfff3, 0xe}, {0xe, 0x7}}, [{0x8, 0xb, 0x200}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xf24}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8080) [ 202.782463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.830033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.852466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.868525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.881896] XFS (loop1): unknown mount option [Xo]. [ 202.888146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.899243] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 202.910643] batman_adv: batadv0: Interface activated: batadv_slave_0 01:19:02 executing program 0: r0 = socket(0x2, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x20002002}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='|', 0x1, r3) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000000)='trusted\x00', &(0x7f0000000040)='cgroup.controllers\x00') epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0xd899) r4 = dup3(r0, r1, 0x0) shutdown(r4, 0x0) [ 202.931348] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 202.952469] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 202.965982] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 202.977006] audit: type=1400 audit(1588641542.640:9): avc: denied { block_suspend } for pid=7749 comm="syz-executor.0" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 202.980013] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 203.018160] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.026433] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 203.033876] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.041750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.054405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.062393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.071645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.079836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.090248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.101682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.111774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.123331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 01:19:02 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="68856e95080000", @ANYRES16=r3, @ANYBLOB="95c4000000000000000001000159000000000b400000004c00180000000062726f6164636173742d6c696e6b00"/98], 0x68}}, 0x11) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x4602) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000140)={'security\x00'}, &(0x7f0000000000)=0x54) [ 203.134398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.163707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.174479] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 203.181382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.190444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.202382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.212917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.223510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.234324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.244973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.254169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.263984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.274752] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 203.281642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.289748] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.306264] device veth0_macvtap entered promiscuous mode [ 203.314476] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 203.317868] XFS (loop1): unknown mount option [Xo]. [ 203.328110] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.328727] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.360703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.370022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.378976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.389011] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.439695] device veth1_macvtap entered promiscuous mode 01:19:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4800) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x1100, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000080)={0x400, 0xbb8, 0x4, 0x9, 0x81}) socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000140)={0xa30000, 0x0, 0x9, r3, 0x0, &(0x7f0000000100)={0x990a72, 0x4, [], @p_u8=&(0x7f00000000c0)}}) fadvise64(r4, 0x8, 0x3, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 203.481687] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 203.544982] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 203.547088] audit: type=1400 audit(1588641543.210:10): avc: denied { create } for pid=7774 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 203.562449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 203.601167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.623392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 203.632453] audit: type=1400 audit(1588641543.250:11): avc: denied { name_bind } for pid=7774 comm="syz-executor.0" src=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 203.639232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.675511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 203.691172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.708369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 203.712466] audit: type=1400 audit(1588641543.250:12): avc: denied { node_bind } for pid=7774 comm="syz-executor.0" src=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 203.720429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.770593] audit: type=1400 audit(1588641543.250:13): avc: denied { name_connect } for pid=7774 comm="syz-executor.0" dest=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 203.773304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 203.804487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.819240] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 203.826808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.864261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.880750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.914510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.935702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.945390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.955430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.964910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.974772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.983947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.993807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.003361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 204.020237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.034476] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 204.041884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.056754] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.071565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 01:19:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x986, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x4602) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000002c0)={0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000000c0)=[0x3, 0x7f, 0x20, 0x5b3d, 0x8, 0x7ff, 0x4, 0xfffffffb], 0x8, 0x80800, r4}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000080)={r4}) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x1010000, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0xc01}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="da", 0x220908}], 0x1}}], 0x4000000000001cc, 0x4000000) [ 204.223036] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:19:04 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xfffffffffffffe99, &(0x7f00000000c0)={&(0x7f0000000380)={0x24, r1, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8}}, ["", ""]}, 0x24}}, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000140)=""/25) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080026bd7000000000000100000000000000014100000018001700000000000000177564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40001) r2 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r2, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r4, 0x2008001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0xba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 01:19:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x14, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000000008500000036000000950000000000000067e8a2f14d96a47f0918283ac84da4060000000268ff3b5387ec7a9c45ff01000000000000fb84de35b5086d515847ab1246cb0310ffa805bcab7f7148cfd65a286fff5d08dcdfcc0a61e9abb825276d851ef05716bb9038d8532c7c"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xf00, 0xfd5d, &(0x7f0000000400)="01040000006867f0710000010000d9b47a254230243f67d76be74f7b6512acaeefad57ffa4990b2c871334f701edd59880b7366ace26be0c5ba3e7f0a9fda5af482413f866135b9c80c0fdfd1c009dad5a828667f11ac18dc5c2323da3e3351e35da7ee71883f2ac3192341f79d8965214b4d1582e737fa0d5a818c1a628d059e858bd0b1e775547cbceaf115d79eae27c2aad41afb7f6af23c834b4ea9a0eb340732f0c66d9facca755b7446a965450e8072edaeacfd65ca09b7b2e301375e3a7de8cea7f2fe7730dd1d42e80cdc9556a16ce680aeb9cd1b9037706b193", 0x0, 0xd0, 0x0, 0x0, 0x0, &(0x7f0000000280)="279d8c17e1701f9248cf0438627594598d8e11e9cf73429cf8792f1606916369fed3cec5d1d9eb1cf274445d46c2e4c30700032a2bc3eca72de794efd975d599688e8a633b360ac4a9b32665f66c333aa4ebb44cce54984f44f232531703825ab2b2e8e569379945db8b0beacc266e5728c7131a3baf129b3e3330b35b488a53476ad1a03c3206c69634c7c9ceb3cbee6a91e65e66fbfb2a30476e187d928443d6469af975a45ee58d1adae80455e62db3911793beabbedf8d7a548529c4d67f", &(0x7f0000000340)="9d0c7daec8119d469ff8f2fe6070a88774d16108715d986571ab7e943a8e6fa725d9b03e40fdd7379237c3f33b44ebb8709bd18277fde53c66a5718f9a0efd37376ca0f5698e1e605224b4e385a66485c9d31afd44a5c648ba7f4eaccbcf7c2fcc0bb2ab2523ec8c1f3b3200000000000000000000000000000000000000000000000000000000005272f6"}, 0x28) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x4602) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x200408d0) 01:19:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000040)={0x6, 0x9, 0x7, 0xfffffffd, 0x4c, 0x7fff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0xa00100}}], 0x4600, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="2400000026000102c98904cd5df02d41850000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a9c60121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7150e2333a6caf9876a586ffce6377da7668bf312d7ba19876ee957db1d8755ba42c46323340b3d164213e380", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc43080094936c654bf55e6ce50aeb152b55e757cb75c52e3a284e2774db2f874b0b8824d65067662a3d138a90fe00d089c55fd7be933bc7844a65d570206224e2d5b10f4307c7f495aa8e7694d2eaaddc534294a03868d621d2dbf70f79173303af78e6daf78b41c13f312f344a7d89defe0e2d1ade0b07ae9af1fa16b633f3b30a9ce3db86a13e8a83676fcb7d8e3664da509717ad6cb16f1d306ed5bf9381eeb539e93470d5251a410a24a4f377"], 0x24}}, 0x0) 01:19:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000240)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000001600)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) exit(0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2900, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x4602) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000003c0)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x2, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000200)={0x0, 0x80000000}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x4602) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c000000150a03000000e3ffffff0000010000060900010073797a31000000000c00064000000000000000020900020073797a32000000000c00064000000000000000030900020073797a30000000000900010073797a3100000000"], 0x5c}}, 0x8040) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffb}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40480}, 0xc085) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @private}}}, 0x0) 01:19:04 executing program 5: mkdir(0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) stat(&(0x7f0000000040)='./bus/file0\x00', &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') 01:19:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x4602) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x80, 0x4, 0x1, 0x1f, 0x14, "53a27581df0cf16b0901cbabfa931bcfddee16"}) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) syz_genetlink_get_family_id$nl80211(0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) io_setup(0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) dup2(0xffffffffffffffff, r4) 01:19:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x14, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000000008500000036000000950000000000000067e8a2f14d96a47f0918283ac84da4060000000268ff3b5387ec7a9c45ff01000000000000fb84de35b5086d515847ab1246cb0310ffa805bcab7f7148cfd65a286fff5d08dcdfcc0a61e9abb825276d851ef05716bb9038d8532c7c"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xf00, 0xfd5d, &(0x7f0000000400)="01040000006867f0710000010000d9b47a254230243f67d76be74f7b6512acaeefad57ffa4990b2c871334f701edd59880b7366ace26be0c5ba3e7f0a9fda5af482413f866135b9c80c0fdfd1c009dad5a828667f11ac18dc5c2323da3e3351e35da7ee71883f2ac3192341f79d8965214b4d1582e737fa0d5a818c1a628d059e858bd0b1e775547cbceaf115d79eae27c2aad41afb7f6af23c834b4ea9a0eb340732f0c66d9facca755b7446a965450e8072edaeacfd65ca09b7b2e301375e3a7de8cea7f2fe7730dd1d42e80cdc9556a16ce680aeb9cd1b9037706b193", 0x0, 0xd0, 0x0, 0x0, 0x0, &(0x7f0000000280)="279d8c17e1701f9248cf0438627594598d8e11e9cf73429cf8792f1606916369fed3cec5d1d9eb1cf274445d46c2e4c30700032a2bc3eca72de794efd975d599688e8a633b360ac4a9b32665f66c333aa4ebb44cce54984f44f232531703825ab2b2e8e569379945db8b0beacc266e5728c7131a3baf129b3e3330b35b488a53476ad1a03c3206c69634c7c9ceb3cbee6a91e65e66fbfb2a30476e187d928443d6469af975a45ee58d1adae80455e62db3911793beabbedf8d7a548529c4d67f", &(0x7f0000000340)="9d0c7daec8119d469ff8f2fe6070a88774d16108715d986571ab7e943a8e6fa725d9b03e40fdd7379237c3f33b44ebb8709bd18277fde53c66a5718f9a0efd37376ca0f5698e1e605224b4e385a66485c9d31afd44a5c648ba7f4eaccbcf7c2fcc0bb2ab2523ec8c1f3b3200000000000000000000000000000000000000000000000000000000005272f6"}, 0x28) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x4602) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x200408d0) 01:19:04 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x4602) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x901, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0xd, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 205.378023] overlayfs: './file0' not a directory [ 205.379620] IPVS: Error joining to the multicast group 01:19:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000100)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x6, 0x0, 0x0, 0x620, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @empty=0xffffffff}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558, 0x0, 0x0, [0x0]}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x5700}}, {0x2c}, {0x8, 0x6558, 0x0, "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"}}}}}, 0x62a) 01:19:05 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x8000, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) get_robust_list(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x28000, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x6, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @mcast1, 0x7e}, 0x1c) listen(0xffffffffffffffff, 0x20000003) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0xfc00], [], @private=0xa010101}}, 0x1c) accept4(r1, 0x0, 0x0, 0x80800) ftruncate(0xffffffffffffffff, 0x208200) mmap(&(0x7f000044f000/0x1000)=nil, 0x1000, 0x7ffffe, 0x11, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$dmmidi(0x0, 0x101, 0x581003) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r7, 0x0, 0x0, 0x0}, 0x30) mmap(&(0x7f0000042000/0x4000)=nil, 0x4000, 0x17ffffa, 0x1010, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000001280)=ANY=[], 0x0) 01:19:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)=""/30, &(0x7f00000001c0)=0x1e) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:05 executing program 5: mkdir(0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) stat(&(0x7f0000000040)='./bus/file0\x00', &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') 01:19:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000240)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000001600)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) exit(0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2900, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x4602) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000003c0)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x2, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000200)={0x0, 0x80000000}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x4602) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c000000150a03000000e3ffffff0000010000060900010073797a31000000000c00064000000000000000020900020073797a32000000000c00064000000000000000030900020073797a30000000000900010073797a3100000000"], 0x5c}}, 0x8040) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffb}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40480}, 0xc085) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @private}}}, 0x0) 01:19:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x4602) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x1, r2) openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x1800000000000060, 0x1, 0x0, &(0x7f0000000100)='(', 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) write$cgroup_subtree(r0, &(0x7f0000000140), 0xfd45) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$SCSI_IOCTL_DOORUNLOCK(r5, 0x4602) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x1) [ 207.045242] IPVS: Error joining to the multicast group 01:19:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000040)={0x6, 0x9, 0x7, 0xfffffffd, 0x4c, 0x7fff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0xa00100}}], 0x4600, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="2400000026000102c98904cd5df02d41850000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a9c60121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7150e2333a6caf9876a586ffce6377da7668bf312d7ba19876ee957db1d8755ba42c46323340b3d164213e380", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc43080094936c654bf55e6ce50aeb152b55e757cb75c52e3a284e2774db2f874b0b8824d65067662a3d138a90fe00d089c55fd7be933bc7844a65d570206224e2d5b10f4307c7f495aa8e7694d2eaaddc534294a03868d621d2dbf70f79173303af78e6daf78b41c13f312f344a7d89defe0e2d1ade0b07ae9af1fa16b633f3b30a9ce3db86a13e8a83676fcb7d8e3664da509717ad6cb16f1d306ed5bf9381eeb539e93470d5251a410a24a4f377"], 0x24}}, 0x0) 01:19:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)=""/30, &(0x7f00000001c0)=0x1e) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) r5 = openat$mice(0xffffffffffffff9c, 0x0, 0x180) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) write$P9_RSTAT(r5, &(0x7f00000000c0)={0x56, 0x7d, 0x2, {0x0, 0x4f, 0x7f, 0x4, {0x40, 0x1, 0x8}, 0x10000000, 0x4, 0x6, 0x8, 0x1, '/', 0x6, 'system', 0x6, '-proc%', 0xf, 'broadcast-link\x00'}}, 0x56) 01:19:07 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x4602) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x1c, r1, 0xb0343aabd1184ba7, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0xffffffffffffffff}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x800, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x34}}, 0x40000) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5}]}}]}, 0x3c}}, 0x0) bind$packet(r2, &(0x7f0000000340)={0x11, 0x7, r5, 0x1, 0x6}, 0x14) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 01:19:07 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x400) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() r3 = getpid() rt_tgsigqueueinfo(r2, r3, 0x16, &(0x7f0000000000)) ptrace(0x4207, r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) sendmsg$sock(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="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", 0x63f}, {&(0x7f0000000200)="e196f0d2b77a7e38991d24e722eee63469156ef0c8f2d8fececad11869f00b469b5d33e40f83f14e599faf7dfad61a7bdf7bb1f19ecf233a629e0661a001000000d44e88df6807a30257c56262c336fc7f0715cabd4b001cc482d4cb69bd6015133514ff7b42c1377f5076a91cf0b826d053bd37b85289da68a31a53773f16c539c8ba7e6f8794ab8beb999d77cb59e010bf7a850df62b9d932d42e1e27b0e3b080063683228290f4ccd74624824e9d6e79466237937e631354be3801f4be8ff27f3b12ac2500500000071d34d7595d00026355ff9478c02aaa125cbe32a55c942f772fc56f2554f9a799f95ff16b81033", 0x2d}], 0x2}, 0x4004045) splice(r4, 0x0, r1, 0x0, 0x60000, 0x0) [ 207.388267] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 207.408838] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:19:07 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f0000000040), 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/35, 0x23}, {&(0x7f00000001c0)=""/118, 0x76}, {&(0x7f0000000240)=""/111, 0x6f}], 0x4}, 0x2}, {{&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000380)=""/85, 0x55}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/145, 0x91}, {&(0x7f0000000500)=""/4, 0x4}, {&(0x7f0000000540)=""/169, 0xa9}, {&(0x7f0000000600)=""/135, 0x87}, {&(0x7f00000006c0)=""/113, 0x71}, {&(0x7f0000000740)=""/204, 0xcc}], 0x8, &(0x7f00000008c0)=""/183, 0xb7}, 0x8}, {{&(0x7f0000000980)=@tipc=@name, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000a00)=""/102, 0x66}], 0x1, &(0x7f0000000ac0)=""/30, 0x1e}, 0x1}], 0x3, 0x40002040, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) keyctl$chown(0x4, 0x0, r1, r2) setgid(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) 01:19:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x4602) connect$rose(r1, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000206010000000000000000000000000011000300686173683a69702c6d61726b0000000005000400000000000900020073797a3100000000050005000200000005009e00060000000c0007800800064000000007"], 0x58}}, 0x0) 01:19:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)=""/30, &(0x7f00000001c0)=0x1e) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:07 executing program 0: ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000140)={0x11, 0x3947, 0x9, 0x5, 0x2a, 0x81}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200000, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) dup(0xffffffffffffffff) gettid() 01:19:07 executing program 4: r0 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x4602) sendto$inet(r3, &(0x7f0000000080), 0x0, 0x2004a040, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) prctl$PR_SET_DUMPABLE(0x4, 0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x6004}, 0x20000000) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r4, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1f, 0xf6, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}}, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x2, 0xfffffffa) getsockopt$bt_hci(r5, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd8000004, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='auxv\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') 01:19:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)=""/30, &(0x7f00000001c0)=0x1e) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4202, 0x0) execveat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000440)=[&(0x7f0000000240)='!\\\xb9vmnet1self\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='(GPLvboxnet1securityvmnet0trusted)\x9e\x00', &(0x7f0000000300)='ppp1#($\x00', &(0x7f0000000340)='nodev}\x00', &(0x7f0000000380)='.)em0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='vboxnet1&:*lo\x00'], 0x1000) r2 = getpgid(0xffffffffffffffff) syz_open_procfs(r2, &(0x7f0000000100)='net/raw\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$SCSI_IOCTL_DOORUNLOCK(r5, 0x4602) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000580)={0x0, 0x0, {0x72, 0x9, 0x3011, 0x3, 0x10, 0x2, 0x2, 0x1}}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, r4, 0x1707, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0xec, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb666}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @local, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffff801}}}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r3) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x4602) ioctl$FIOCLEX(r3, 0x5451) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$SCSI_IOCTL_DOORUNLOCK(r6, 0x4602) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x60}, 0x2001c000) [ 208.297420] audit: type=1804 audit(1588641547.960:14): pid=7997 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir468254918/syzkaller.aBD4Ih/13/bus" dev="sda1" ino=15763 res=1 [ 208.545646] audit: type=1804 audit(1588641548.210:15): pid=7997 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir468254918/syzkaller.aBD4Ih/13/bus" dev="sda1" ino=15763 res=1 [ 208.573472] audit: type=1804 audit(1588641548.230:16): pid=7997 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir468254918/syzkaller.aBD4Ih/13/bus" dev="sda1" ino=15763 res=1 01:19:08 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0xc0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, @perf_config_ext={0x80000000000102, 0x3}, 0x0, 0x3, 0x0, 0x7, 0x0, 0x40000001, 0x8}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) keyctl$join(0x1, 0x0) dup2(r0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141083, 0x80) finit_module(0xffffffffffffffff, 0x0, 0x3) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4044) r7 = openat$vsock(0xffffffffffffff9c, 0x0, 0x50800, 0x0) ioctl$KVM_SET_TSC_KHZ(r7, 0xaea2, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x34) read$alg(r6, &(0x7f0000000040)=""/93, 0x5d) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000240)={{0x2, 0x4e22, @remote}, {0x1, @broadcast}, 0x4, {0x2, 0x4e24, @local}, 'macvtap0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) getsockname(r4, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000380)=0x80) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000140)={0xffffffffffffffff, 0xacd7, 0x7}) shmget(0x1, 0x11000, 0x40, &(0x7f0000fec000/0x11000)=nil) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r9, @ANYBLOB="040000000000138155065c86bea9548171c1f6d1a4baf508c8339d409559c76463020ba8e36eb71ffe7bc2be446a2ddaa8249433d6b96253ba7e663d3b15928e8f3a4036c149a08012e6fff16e793330f84d61c5797094e67da1fb9c787ff4e9000000c22f429950f285e1188341baebbbd94f1566b87ec6492d0b0aefe3bc91a40b067b958d3add1c816607b630817de305e88faa64cde8f3d249e689ea52aeaf643f4c2dbdaf7e5637429d00000000000000000000000019000000"], 0x20}}, 0x0) 01:19:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)=""/30, &(0x7f00000001c0)=0x1e) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) r5 = openat$mice(0xffffffffffffff9c, 0x0, 0x180) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) write$P9_RSTAT(r5, &(0x7f00000000c0)={0x56, 0x7d, 0x2, {0x0, 0x4f, 0x7f, 0x4, {0x40, 0x1, 0x8}, 0x10000000, 0x4, 0x6, 0x8, 0x1, '/', 0x6, 'system', 0x6, '-proc%', 0xf, 'broadcast-link\x00'}}, 0x56) 01:19:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) r5 = openat$mice(0xffffffffffffff9c, 0x0, 0x180) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) write$P9_RSTAT(r5, &(0x7f00000000c0)={0x56, 0x7d, 0x2, {0x0, 0x4f, 0x7f, 0x4, {0x40, 0x1, 0x8}, 0x10000000, 0x4, 0x6, 0x8, 0x1, '/', 0x6, 'system', 0x6, '-proc%', 0xf, 'broadcast-link\x00'}}, 0x56) 01:19:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)=""/30, &(0x7f00000001c0)=0x1e) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)=""/30, &(0x7f00000001c0)=0x1e) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)=""/30, &(0x7f00000001c0)=0x1e) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) [ 208.865898] device veth0_macvtap left promiscuous mode 01:19:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) r5 = openat$mice(0xffffffffffffff9c, 0x0, 0x180) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) write$P9_RSTAT(r5, &(0x7f00000000c0)={0x56, 0x7d, 0x2, {0x0, 0x4f, 0x7f, 0x4, {0x40, 0x1, 0x8}, 0x10000000, 0x4, 0x6, 0x8, 0x1, '/', 0x6, 'system', 0x6, '-proc%', 0xf, 'broadcast-link\x00'}}, 0x56) 01:19:10 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0xc0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, @perf_config_ext={0x80000000000102, 0x3}, 0x0, 0x3, 0x0, 0x7, 0x0, 0x40000001, 0x8}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) keyctl$join(0x1, 0x0) dup2(r0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141083, 0x80) finit_module(0xffffffffffffffff, 0x0, 0x3) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4044) r7 = openat$vsock(0xffffffffffffff9c, 0x0, 0x50800, 0x0) ioctl$KVM_SET_TSC_KHZ(r7, 0xaea2, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x34) read$alg(r6, &(0x7f0000000040)=""/93, 0x5d) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000240)={{0x2, 0x4e22, @remote}, {0x1, @broadcast}, 0x4, {0x2, 0x4e24, @local}, 'macvtap0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) getsockname(r4, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000380)=0x80) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000140)={0xffffffffffffffff, 0xacd7, 0x7}) shmget(0x1, 0x11000, 0x40, &(0x7f0000fec000/0x11000)=nil) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r9, @ANYBLOB="040000000000138155065c86bea9548171c1f6d1a4baf508c8339d409559c76463020ba8e36eb71ffe7bc2be446a2ddaa8249433d6b96253ba7e663d3b15928e8f3a4036c149a08012e6fff16e793330f84d61c5797094e67da1fb9c787ff4e9000000c22f429950f285e1188341baebbbd94f1566b87ec6492d0b0aefe3bc91a40b067b958d3add1c816607b630817de305e88faa64cde8f3d249e689ea52aeaf643f4c2dbdaf7e5637429d00000000000000000000000019000000"], 0x20}}, 0x0) 01:19:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)=""/30, &(0x7f00000001c0)=0x1e) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:10 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x4602) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x4602) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x4602) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x4602) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="55afc2fb8fcabf558c6cf6324f7729c31b93a7ae87339d03f7d2bd5608625834961af4f55fb46949dd74c6a55db5e724a96abf7279fb8e8e4bd060c1ad3a01a71ef3502922c2f87d035d90209a8e27c674db6993b08a71b755a179de2c1c5bcd657e6895ea29b1a25cf7ac97", @ANYRES16, @ANYRES32=r0, @ANYRES32=r3, @ANYRESHEX=r3, @ANYRESHEX=r2, @ANYRESOCT=r4, @ANYRES64=r5, @ANYRES16=0x0], 0xd4}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:19:10 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f0000000600)={0x3, 0x70, 0xc0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, @perf_config_ext={0x80000000000102, 0x3}, 0x0, 0x3, 0x0, 0x7, 0x0, 0x40000001, 0x8}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) keyctl$join(0x1, 0x0) dup2(r0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141083, 0x80) finit_module(0xffffffffffffffff, 0x0, 0x3) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4044) r7 = openat$vsock(0xffffffffffffff9c, 0x0, 0x50800, 0x0) ioctl$KVM_SET_TSC_KHZ(r7, 0xaea2, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x34) read$alg(r6, &(0x7f0000000040)=""/93, 0x5d) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000240)={{0x2, 0x4e22, @remote}, {0x1, @broadcast}, 0x4, {0x2, 0x4e24, @local}, 'macvtap0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) getsockname(r4, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000380)=0x80) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000140)={0xffffffffffffffff, 0xacd7, 0x7}) shmget(0x1, 0x11000, 0x40, &(0x7f0000fec000/0x11000)=nil) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r9, @ANYBLOB="040000000000138155065c86bea9548171c1f6d1a4baf508c8339d409559c76463020ba8e36eb71ffe7bc2be446a2ddaa8249433d6b96253ba7e663d3b15928e8f3a4036c149a08012e6fff16e793330f84d61c5797094e67da1fb9c787ff4e9000000c22f429950f285e1188341baebbbd94f1566b87ec6492d0b0aefe3bc91a40b067b958d3add1c816607b630817de305e88faa64cde8f3d249e689ea52aeaf643f4c2dbdaf7e5637429d00000000000000000000000019000000"], 0x20}}, 0x0) 01:19:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) r5 = openat$mice(0xffffffffffffff9c, 0x0, 0x180) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) write$P9_RSTAT(r5, &(0x7f00000000c0)={0x56, 0x7d, 0x2, {0x0, 0x4f, 0x7f, 0x4, {0x40, 0x1, 0x8}, 0x10000000, 0x4, 0x6, 0x8, 0x1, '/', 0x6, 'system', 0x6, '-proc%', 0xf, 'broadcast-link\x00'}}, 0x56) 01:19:10 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9e78e7e2468c2027342ba4aaaf0f78173cae4ad1037f294442064543ce71cc473192232056bbfdf13cce81a37bd418", @ANYRES16=r3, @ANYBLOB="b72300000000000000000c00000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) 01:19:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)=""/30, &(0x7f00000001c0)=0x1e) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:10 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000100)={{}, 'port1\x00', 0x82}) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x88) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f0000000000)="b26c6f7efaac8e3429b9ebaa534c98f72774d115c92a8d8b4534f3e4a0e57d39d77a3f474b8a083d2e6aa81f165a398c233471b595bdd1ec48011bd36dcc05d825d32c61aa6b42d83abe6c8845480001ebef4cd80ed412a2ebd1b65c931b795d30db19f593be9ae0069f1bd64c4c9a16748e25ec82ee02117c982944adc4f1213e1d8ad9a7da10a942f87abf1fa90c8d410635a859a4f30edfc962fce36240b40aefcf629ae1345f454b09012b6f67b49fd1c6a14589717e9122fb708e4bc41a8394045708aebafe87fb98d246ef808645b6d974f5a57b", &(0x7f00000002c0)=""/110, &(0x7f0000000340)="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", &(0x7f0000001340)="f0cd803f0e304e0dc5ceb0f6b9cbebdf04c5225427753226c6b7cceb58c2f3feea83eca1db165396ef9daff9ac0e28d2a2806663cc29d8a6703e1d9937bf7648d234c9f5245c342d28c61a3d6a0729572c91bf29f8b310f905cd7163d2113e75cbeb03b2c500f216f98590218103ab3ae4426d55099985a7b56d90a1b08e362c7f4488c6529a19e5ce1632fe8192ff121f9d47795facbfc54c12c1301aaa6399d848891813bc9293a9fec3cf598a30b4a2c43a23cf1cb66fa4a6ca0528ea6bcfd8f69910e4c1fb833923447cc840310ad94f33321c8673ea35e02dc7452de29899c939ef9f7b3fc44b25e9bb11a20190455c66ed783d82af46d7406cc24caa5c7a29b29db3398b9fba8d1b0cccacf0abade2dc007420cc9e2322d029f3c0df401f32ef15c260fb4a66326663e4349debd3f55b939dfff33a542e96752885933e701da906b99b5a01aa351b0518a8191cd26bb3a75d82d7b99983859fc9de3ee075e120fe106d0151d62c997559c98d425b8a0d823d1488a1dac163d7410194337f4ace7ded7d2cdd0f66da5a2604717ace22654bcc985085a6550afab42a966fce5d15da87fde8dd13e00b983701a3f43ff53c3539f350d68a62e0eb8e6cfc71f5f8a9c7874b94bbce8d11bb63a848d4652f7c3b41b7ed9beb54d0cfc720ef442f5612b6dd97f9906339a2946b12cd3c8a4dde2046ac98709e0495d1f0a3acda060715f0de82cef9d5cf7d59cfc8868e56aad6dd746892ca6b70c6038ce015844ffdaa3c3f8a1f3d1bdd44dba46f374325630aca8449691ef0ca10719849d58640598553fa4024b3d1aedaeda1e725ffc6ed56c0d2f72df1144ce844d6acae0ae953aac2d8ab909d884a793e6ab4bd42a5983548744294c708a318f1384dc777c6482ce89991ab773e8abb10e669d337b3e6ae9ba7c5249c1b2dff111a9c4c43af98178aa701c6794bc1927502dd82c3008d870e8e98f7edaa8543dda975766ee042a801352b0a495b1b8462ef3aa6e0b3634db2600df24a285e2ec1499ad5c819eef6ced65b9dbbb11d525261c6320fe277d072629d5c46a32569bd3eceaca5841466f1dcd840426f61d4ee5b20584e9e412be50c95f1729fa0d5a6443a975e85efbaba9f6feccbedafed8f43beebeed3832fc6c3b275551d48a58a088608d10c5f52a946c30db544da8621139ad91ae3a647fd907def6b8b121a9c394c44a028798a0af95d96e87e2f58b4f1c7575cedc6531fe2a449b3bf58736cff4af4dd7595aef8a96f8cfbfa6e07fc26d6389a6c22dcc9e88ccbffa5d5ffe39579a843545ced673701c7ced1373218ba34b91eaf623f740c7fba5ffcd1605b5340bef7a5218b977b90eace1a44fb9da636b8d2f9edc5e616bdcce50bbff3c563836d262b82e13b308dea02b002b955c6bb14a4ea7e39c36727e04310bc17067cf835006cf75258704b7a7026aebda0bfe2c3ec9bc1499fe52daecba54f4d625b58914d464808b231a150bfffb05b394f8c0ffd8d022bfb728c0ad71fbe7eb4af33021b44e6390d5dbd43d88ec0dd119cd5c3921fea7f9856df34abb9daab76c4c074e022f996257f5f76c53a086cea64c0db9a4aff56ff738c2801594533e595064ca659980292aa01e26491043417db378d1a407f603241128e7dc50be09f45fc5c79f4f175d60a0d3f9dae7fc2a0cabb796e31aa1cbf5f65f2dc1aba7c08c4693ea2725a24181f9c1c43aa760fcb1011836390db6900d91058f271323533eb6dad7e1b25d65e77c1350b6fc6cfd92e36ba210cd91d8801542a062fb014d3f213fec43c0109e0c42da02c05a33119e4febb368ef405e0f0683925f56a8c67163551a32e43c27ecbf0760ae629b23d9d013845b194fb69bf24ec791e2e72a5d3245528eb84d101570f48bcf47210df7be242e59315599baaba03e6fdf87d1ce0487b48a685dc5c719621a30d8dc907971c0e12214ddfa3ba71d1166510afb024fc1f618904b9f66e5f5715b147d476a381f42029895ec5451f57ffad378e3d9ee4089a7a9329a6f64ec7d3574c2cf4391f173f1f3bee0653f978caafc91cfced0f5ba2e7bcb4161df54d710b726e6dd01bc52c68c57a06bd6950dc9c1de20f1505eef8f93ed31370660c5361792e5c0924081aa0f7efbeea43c1dbe16ea96553d67a0e7dfa40548ac922fc3e61c8cf08ab32ae267c7516607f8d9cfe65ff855aa2f66057198b8170da365369f108339dce084a90f429d83c98d581c9d9ee15c00b2763c792cf2bf6aa269c7cd8833960e7c83fa724473828375259780c788dd7b0e3afdce56dc9e7242a2a95bb983cfea3351709ef24c2891f61c7f35af0245f296a545a2a0010450b30d1c7c149fe3c34faad63b5002b83783677d330fb84aaa69d39066297bc8288f7e5c08b482b1261762785f92b7f852afa81ad03c2f1b4adff3939b6616e65cabfb2d31bb380bdc8a9a5a13ebb27a245f7a7b73e5704741cc21fc46b5824089fcee2e1d035be46a31f2f7759701525fee3d25e41197458669dfc0b16cef9cc2ae16f5ba40e7320cc45acb99ab99fb97ca53cb6ba698c38474da4094b9495b37dc237120d301096dd06863cc11a6492c9cda8869f24f3a04b4c24706752a19972a4444899b31d4c7b2c343de41bd18020b1554d91ab754c5fab0441b0050b66c96457fdaa265c8c93e671a3e1c55e31214a20942122af725046635acb6eefb3002a48f0a5978e26986e1ce85693bf3431854fff39671c22925ce53135b6573acb352be9e40f7666ec8b304f5ffe4176866ef5de3da729748eaa1cac62569d16a6cd070f760a5a0dc2c02187185a1cdf36e025c282cbd87ddc2933aa5b352987fa5ba9ee8cb5fb86693ceba822319e435f9f7c1a6f0dd3a24e3d9ac2a1ff6664edd13b1e8b3652936fa6bd38fa1c22f344f4913877a0fc827c6e2d686eb1d79507eeb0af252839a8fe73b66a835251ff03595f54f51d461584d6ffc40fd48acb9e1c2e22b4fb2e17a966ed1b5f263de55b4d85b3f1fe06f4c68aa92e7d39a59aa31cefb61560b4217f0ed280b7c6658af36562bdfc2f80fe82f43e8b2e6236386875b3119c54bf7d7b9ad75884a4aa888882f421dfba58994efc35afb8828a6a5ace01278373c804ead1030a786ddf8f8d25ad376271e7274a9b6715bc29e666a1b004b0777aa5cca9a5b30cd124e0bc786ec061009a6a8378171b4b8728a0271008a8e60c80080c77898de8ab86b8a2bd722fd9ea105fa123a2424e3fdfb4263b455f07629a20351976c294ee2184905e6f7f3ee17cea0093a9df74996881ecb2f7c8acebf85dc42c220f6c2496531c8dafa5ef07299c566a1d3722c3a75af1cde63a2f89b463ea35b44d583525fa88af707a703b285494b4a57103e959f267c6caa829c2651fd23a724444e81df3223fe0d3aa20a299fb6e23171d144c79e34c2a7870ee0cc55e05083000a593f4ff0611fb523590f50bca9f0b3faa263e1c2ccdca8dd4fd06d4c582391aca8902aa1bb01b93d3f9c028b0ef13b41083d3a8f4e522585dbffd7b0ebb3f49db1b5a08b0c14526d226edf5130d007f7ac1d7e0e7c05f65f98ec002f194ff71de475dd1ad6007e24e28a39a685dbac29f03c184d8e85c13e961774c2c53f2a24d81563a9530249dae8b0eaedf352324ea8b372b5e657ef5493b8aadc1b431f7ceb648b8cdd7ba4a78c37539ee60cc6aa14e1d4e77379d31a502b0059256c65a5361ebba904900aa3d5d57b227cf77ef579b89e85aea8e05a78dbcc43a71de6c1f0b4d365b570220cabee89b4167dbb2f5c0b3fb11f08ff8d35a4a976e258d9b6f664b7d3cac7f6e8d35224a3404cd40d5305f921b3533b04e63a79f71b7ba6b65e70b996ab180bb8bdbf1cd5f6fb1b7537023a5c70a6731f3871a3f36826fca7a760dc70e56a21e87debe806f4d476eab1254c37d64d3e27a92a36890eb65852425496063dbe23f2051270efe2643b8f369b1b7a0ae878b55172c8e6c6c6832307f924fa98520be84d188c1e89469afcb33e8f7eb99e09b185458b8549341f449ca48b0991ec77e90b3be02c4dcffb81f6ede59c075bec6cb81cfecc37b4978f159f1dac0a710884205a3d3a8d5a4053907872600f05063445e937028ea646510db2ce757d9286f81918e506d19e578d5a1f8002d2404ee18278214bd51d3ff4849dc41aab6e097226fb0b4b5a5475042ca57196477db0923f11f57fe825c0265cfb90e0396a66ed8a2f85c45e3bba4c5574fd26312db4221aaad2c40a3b39ad4479363859ab588d38d8289624ea08417f4595af287c7912b4d3dc3889f4ded01a0115ad478b60972709e6e079c2a10ab6242762e2d69b73c2626ec9138410e42f614cd68bc425b85153fdc7d7f2078b604278735cbde7d7e824c977d27dd45ca263b99b930bfb3c105496bc55412bcb621ab2f71f884c10c51b6af97c44ede007d408bb9c8580dee6e1c38497d3ee87bb3ddc9c31cbafae9b951d0279a77f18790421d56248dffef530d72a64b0f4ef148068a4dd5cf71ab0c3e4f049f10b42e1e59c6d8e86e7db28d6171758abc744e6598547848e88599d275430a7bff9bb22e85e862642119667ba347277671b39eeeb714f8919c4dfc956632cd2350dbb0128eab2a6632a5010946ef931c55a95a8842a453159388e21e24f1aff0e910eb6371960671f655c64d9871c756df221d61332d8f0728046c19100f26c2078ff8b7fcac27afe9f5922ef4855c43ef957f659bdbd7cfed35e29f54765fed4a9befc4cb36ded8ea665c3c02bbe4c49689571eeab9fd8c133a45656eda572ad937e1ff820e0b5437a412345fb5d6da7c4247b135e13a4053ad241afc89a5b1b06e680e03864fe3db3fcb727a3a65914943256f872db637c0a653470c6106e84059193af8a0a915545f25690e032c045730230c77193c97ae3aff817a24edbe03adce3f4058fb88d02a8b3da51e18af8139a2395486d8b3c86678f9eccc318bdb818fcbd60eed21011ede8be6d44bb39c257ca912bccf2e544bcd841e0440671b9ef337c9ed5b33acb5f893d2da96f7402cdb437cd50de27b1946e5a597f4235945f1d66f36c4357601a6657555f3e167cce7478960bf03f20aa0405a34280fdec4dc12c921768d57c0c36529b6c5ff71618f481ebdbda56915b399008b5b31b198296878be31b39585abe3d37576813b85992375b13c740b74cb3821f1ed17e9be385c7e9d9d7c9bd8c264f77a09c52a6673909538512d6159c11709f76242d6146a6109405e76ea81ab9cb3d1b619a4f67ac46a6a992dd660b0db19a6c77be357ad639830e294a49ca91cbac4a22ba77e61ab080375b682bae3dc0dcdb990a109c9e556abab66b2b7b9856c921741dacdca965624e4bd92ad2a1ddaeb735c68ca43d66feaa43eac07d92ef5938efcdc6a038b8c413543b945876dd7dd559692f25b602bdf3a2efce194ea2ccd0d65d7f833a9ea68c8608372970d97437843bd17df76f2b3c6f2a8f313e630ee507eb9384c1fb71c3609153adee756d8a7af105cc401df252fb4fa2f634c0bc8e13b53cef95c9608c65ab8029fbbf3f9387e11333c96cf9d6025699ea2bfbe7d35dcac6824d437566c8ab27e7817db56675361192a3ec673103c93bd96c4d3edbbf8cc2d32541a06cd72b02fe719770afc8f5086f6fdd375bed1d1e9951090f08143bd2b09e245d2713541c9b7a5a55f76529a0f8c643257e651f54e2c5e16735e03d4c67951130de26b0d05ffc6e7727b589af307c2360039381cb716392007efcb8c", 0xfffff001, r4}, 0x38) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 210.850775] device veth0_macvtap left promiscuous mode 01:19:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x180) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)=""/30, &(0x7f00000001c0)=0x1e) r4 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x180) 01:19:11 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000080)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "046842a7ed59f49c9aed5d67b9a84f14cbc2ffb834c75e66d79fbd19f060783f", "f96a2ddd2f6df0ef2ee80700100051ac", {"2f106cfcb8913cbc06f374f4aa00867e", "c34ef4242bf2f74a4b4510d469619365"}}}}}}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000140)=0x2, 0x4) close(r1) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x4602) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x9) 01:19:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)=""/30, &(0x7f00000001c0)=0x1e) r4 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4, @multicast2}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x100, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000)='nr0\x00', 0x8001, 0x7b7, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x4602) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000200)={0x0, 0x5, 0x9, 0x4}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x4602) write$fb(r4, &(0x7f0000000040)="88a6713e50dd4534191a9d7b1bf4cf9febabde5b2e3e120e526acfd4333585f355dde5c6602cbe06892663defb53a2208ae368e39c5c14c0484332e433694920220088", 0x43) syz_mount_image$gfs2(&(0x7f00000001c0)='gfs2\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) 01:19:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x180) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000140)="baf80c66b8fca2608766efbafc0c66ed66b8010000000f01d936da23c4c39dcfec78f30f09640f236d2e7d0a66b84f0000000f23d80f21f86635c00000e00f23f867e5fb673e650f01c2", 0x4a}], 0x1, 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000380)={0x1, 0x0, [{0x7}]}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:19:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)=""/30, &(0x7f00000001c0)=0x1e) r4 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)=""/30, &(0x7f00000001c0)=0x1e) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)=""/30, &(0x7f00000001c0)=0x1e) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:12 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x4602) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='autofs\x00', 0x2400, &(0x7f0000000400)='proc\'\'bdevvmnet0#proc/-ppp1+\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x4602) ioctl$KDMKTONE(r1, 0x4b30, 0xc97) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x3, @win={{0x8, 0x2, 0x8, 0x5}, 0x3, 0x8, &(0x7f0000000180)={{0x401, 0x8000, 0xffffffff}, &(0x7f00000000c0)={{0x4, 0x100, 0x10000, 0x1000}, &(0x7f0000000000)={{0x8001, 0xe35a, 0x529b, 0x6}}}}, 0x1, &(0x7f00000001c0)="8d57bbd215ca7ca4ecc53d319399bab071477c778b3a7ee0c008a4a7a530114b9e30969339aeb088a160", 0x7}}) 01:19:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100)=""/30, &(0x7f00000001c0)=0x1e) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2fe00000000007}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="66b8050000000f23d80f21f86635000000e00f23f80f01c4f3a73f2e0ff846c266f967f3900f00170f12da0fb5810500", 0x30}], 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$SCSI_IOCTL_DOORUNLOCK(r5, 0x4602) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x11, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000080)={r6, 0x6, 0x3, [0x8, 0x8, 0x7]}, &(0x7f00000000c0)=0xe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 212.375591] gfs2: invalid mount option: <Á±Ö ^ºœ<_.²ˆœ#nÇ<¸ˆX&iIôjŠÈq§Ù®sðýÿn!½š’ÖQ ¤öÓÍ©Š‚q&èÎÃ+Kâilýð”Ñ´p [ 212.375614] gfs2: can't parse mount arguments [ 212.450984] gfs2: invalid mount option: <Á±Ö ^ºœ<_.²ˆœ#nÇ<¸ˆX&iIôjŠÈq§Ù®sðýÿn!½š’ÖQ ¤öÓÍ©Š‚q&èÎÃ+Kâilýð”Ñ´p [ 212.450993] gfs2: can't parse mount arguments [ 212.487189] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 01:19:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x180) 01:19:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x180) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 213.224434] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. 01:19:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) fcntl$dupfd(r1, 0x0, r0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:13 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x4602) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='autofs\x00', 0x2400, &(0x7f0000000400)='proc\'\'bdevvmnet0#proc/-ppp1+\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x4602) ioctl$KDMKTONE(r1, 0x4b30, 0xc97) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x3, @win={{0x8, 0x2, 0x8, 0x5}, 0x3, 0x8, &(0x7f0000000180)={{0x401, 0x8000, 0xffffffff}, &(0x7f00000000c0)={{0x4, 0x100, 0x10000, 0x1000}, &(0x7f0000000000)={{0x8001, 0xe35a, 0x529b, 0x6}}}}, 0x1, &(0x7f00000001c0)="8d57bbd215ca7ca4ecc53d319399bab071477c778b3a7ee0c008a4a7a530114b9e30969339aeb088a160", 0x7}}) 01:19:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x4602) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000100)) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:13 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x4602) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='autofs\x00', 0x2400, &(0x7f0000000400)='proc\'\'bdevvmnet0#proc/-ppp1+\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x4602) ioctl$KDMKTONE(r1, 0x4b30, 0xc97) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x3, @win={{0x8, 0x2, 0x8, 0x5}, 0x3, 0x8, &(0x7f0000000180)={{0x401, 0x8000, 0xffffffff}, &(0x7f00000000c0)={{0x4, 0x100, 0x10000, 0x1000}, &(0x7f0000000000)={{0x8001, 0xe35a, 0x529b, 0x6}}}}, 0x1, &(0x7f00000001c0)="8d57bbd215ca7ca4ecc53d319399bab071477c778b3a7ee0c008a4a7a530114b9e30969339aeb088a160", 0x7}}) 01:19:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x180) 01:19:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x180) [ 213.256958] kvm: emulating exchange as write [ 213.263262] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 213.263272] XFS (loop4): Unmount and run xfs_repair [ 213.263283] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 213.263305] 0000000010f449b5: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 213.263318] 000000004ccb11b9: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 213.263330] 000000003d4dd852: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 213.263339] 00000000bc83d4b1: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 213.263349] 000000007d2c86aa: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:19:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x3c, 0x0, [], [@pad1, @padn={0x1, 0x1, [0x0]}]}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) [ 213.263361] 00000000839d2231: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 213.263373] 000000002f76d5ee: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 213.263386] 00000000ae4b1c80: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 213.263422] XFS (loop4): SB validate failed with error -117. [ 213.785221] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 213.785254] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff 01:19:14 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) [ 213.785270] XFS (loop4): Unmount and run xfs_repair [ 213.785282] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 213.785297] 00000000eb3e7688: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 213.785309] 0000000086982d7d: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 213.785321] 0000000068f18837: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 213.785332] 00000000604457ee: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 213.785343] 0000000062f841fc: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 213.785354] 00000000c7387207: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 213.785365] 00000000fef04494: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 213.785377] 00000000bbc8c8bc: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 213.785404] XFS (loop4): SB validate failed with error -117. [ 214.303015] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 214.303049] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 214.303058] XFS (loop4): Unmount and run xfs_repair [ 214.303069] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 214.303086] 00000000d2ece2cd: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 214.303098] 00000000b815073e: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 214.303110] 0000000022748009: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 214.303122] 0000000044647efc: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 214.303135] 0000000049601d63: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 214.303147] 000000000227580d: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 214.303159] 00000000e167b3cb: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... 01:19:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x180) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:14 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x4602) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='autofs\x00', 0x2400, &(0x7f0000000400)='proc\'\'bdevvmnet0#proc/-ppp1+\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x4602) ioctl$KDMKTONE(r1, 0x4b30, 0xc97) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x3, @win={{0x8, 0x2, 0x8, 0x5}, 0x3, 0x8, &(0x7f0000000180)={{0x401, 0x8000, 0xffffffff}, &(0x7f00000000c0)={{0x4, 0x100, 0x10000, 0x1000}, &(0x7f0000000000)={{0x8001, 0xe35a, 0x529b, 0x6}}}}, 0x1, &(0x7f00000001c0)="8d57bbd215ca7ca4ecc53d319399bab071477c778b3a7ee0c008a4a7a530114b9e30969339aeb088a160", 0x7}}) 01:19:14 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) [ 214.303172] 00000000d3c5cd6b: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 214.303197] XFS (loop4): SB validate failed with error -117. 01:19:14 executing program 2: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:14 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x4602) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='autofs\x00', 0x2400, &(0x7f0000000400)='proc\'\'bdevvmnet0#proc/-ppp1+\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x4602) ioctl$KDMKTONE(r1, 0x4b30, 0xc97) 01:19:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x4602) openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 214.885907] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 214.885942] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 214.885950] XFS (loop4): Unmount and run xfs_repair [ 214.885961] XFS (loop4): First 128 bytes of corrupted metadata buffer: 01:19:14 executing program 2: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) [ 214.885976] 00000000bfc7b39e: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 214.885989] 00000000a517d063: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 214.886002] 00000000d08a66a9: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 214.886013] 000000008e992fc4: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 214.886025] 000000006065a5dd: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 214.886037] 00000000a85eec86: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 214.886049] 00000000ff0fff50: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 214.886061] 000000008d394beb: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. 01:19:15 executing program 1: ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f00000000c0)={0x1, 0x3}) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1d, 0x0, "2461758a5264d9a14fb62fe6bce0eeb5025264c73c839e09f5ff08cccc6e3ffd7477f28557a8556964d283b24c2a0e31a1d4a8d735eec48df90a55e5c0b3a337860cfd677448d1258641934ef7302d02"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x84240, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup2(r2, r1) [ 214.886085] XFS (loop4): SB validate failed with error -117. [ 215.224501] hub 9-0:1.0: USB hub found [ 215.225678] hub 9-0:1.0: 8 ports detected [ 215.293274] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 215.293321] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 215.293329] XFS (loop4): Unmount and run xfs_repair [ 215.293338] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 215.293352] 00000000422f3960: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 215.293363] 0000000048955470: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 215.293374] 000000004bd13b1f: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 215.293386] 000000006352c80b: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 215.293397] 0000000087fc2b53: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 215.293408] 000000000474b95e: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 215.293419] 00000000b730c118: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 215.293430] 000000007e7bd32b: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 215.293480] XFS (loop4): SB validate failed with error -117. 01:19:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:15 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x4602) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='autofs\x00', 0x2400, &(0x7f0000000400)='proc\'\'bdevvmnet0#proc/-ppp1+\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x4602) ioctl$KDMKTONE(r1, 0x4b30, 0xc97) 01:19:15 executing program 2: r0 = socket(0x0, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) socket$nl_generic(0x10, 0x3, 0x10) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80800) fstat(r1, &(0x7f0000000200)) msgctl$IPC_RMID(r0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x8a, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x9c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x9c}}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) 01:19:15 executing program 2: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:15 executing program 2: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:15 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x4602) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='autofs\x00', 0x2400, &(0x7f0000000400)='proc\'\'bdevvmnet0#proc/-ppp1+\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x4602) 01:19:15 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/25}) accept4$x25(r2, 0x0, &(0x7f0000000140), 0x1800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000180)={0x8, 'veth1\x00', {'team_slave_0\x00'}, 0x6}) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) 01:19:16 executing program 2: r0 = socket(0x11, 0x0, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:16 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:16 executing program 1: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7508000000000000002e7f529a2f6275732c6c6f070000ff010000002f6275732c776f726b6469723d2e2f66696c65302c00"]) 01:19:16 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x4602) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='autofs\x00', 0x2400, &(0x7f0000000400)='proc\'\'bdevvmnet0#proc/-ppp1+\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) [ 216.062950] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 216.062986] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 216.062995] XFS (loop4): Unmount and run xfs_repair [ 216.063005] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 216.063022] 0000000020911d0a: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 216.063041] 00000000493ea2c4: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 216.063054] 00000000c95aac97: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 216.063066] 000000003c66f62d: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 216.063078] 000000001d95a569: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 216.063091] 00000000894e2edc: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 216.063103] 00000000810386e0: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 216.063114] 0000000001639a48: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 216.063139] XFS (loop4): SB validate failed with error -117. [ 216.479694] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 216.479731] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 216.479740] XFS (loop4): Unmount and run xfs_repair [ 216.479751] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 216.479766] 000000001648f413: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 216.479779] 00000000cb4933a8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 216.479790] 00000000acde8647: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 216.479803] 000000000e9dc804: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 216.479816] 00000000492fa339: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 216.479834] 0000000001c68b22: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 216.479847] 000000004efa6f7d: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 216.479860] 00000000b9bbf86e: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 216.479885] XFS (loop4): SB validate failed with error -117. [ 216.571999] overlayfs: unrecognized mount option "u" or missing value 01:19:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:16 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x4602) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0x9) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000240)={{0x117001, 0x10000, 0x4, 0x0, 0x3f, 0x1, 0x2, 0x54, 0x6, 0x3f, 0x91, 0x6}, {0x6000, 0x1, 0x9, 0x7, 0xec, 0x1, 0x6, 0x9, 0x8, 0x5a, 0x5}, {0x0, 0x4, 0xc, 0x20, 0x6, 0x1f, 0x15, 0x3, 0x4, 0x0, 0x40, 0xff}, {0x0, 0x0, 0xb, 0x7, 0x7f, 0x1f, 0x4, 0x3, 0x20, 0x70, 0x0, 0x2}, {0x4000, 0x100000, 0xc, 0x4, 0x1, 0x8, 0x7, 0x0, 0xa9, 0x40, 0x3}, {0x4, 0x4000, 0xf, 0x8, 0x3, 0x0, 0x7f, 0x4, 0x1f, 0x6, 0x1, 0x4}, {0x3000, 0x2, 0x4, 0x48, 0x5, 0x0, 0x1f, 0xc0, 0x3, 0x0, 0x0, 0x1f}, {0xd000, 0x4000, 0xa, 0x9b, 0x4b, 0x40, 0x14, 0xb1, 0x0, 0x7e, 0x20, 0x7}, {0x2000, 0x8}, {0x4, 0x7f}, 0x80000004, 0x0, 0x2000, 0x20, 0x5, 0xd500, 0x4, [0x2, 0x6, 0x8001, 0x4]}) fsetxattr$security_ima(r1, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@sha1={0x1, "b3af3dd5ed3c552c018f44ee3512f44c45d9e421"}, 0x15, 0x1) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x100000e, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) ioctl$BLKGETSIZE64(r3, 0x125e, &(0x7f0000000040)) 01:19:16 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) [ 216.816115] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 216.883975] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. 01:19:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:16 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:16 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x4602) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='autofs\x00', 0x2400, &(0x7f0000000400)='proc\'\'bdevvmnet0#proc/-ppp1+\x00') pipe(&(0x7f0000000100)) 01:19:16 executing program 0: inotify_init() fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x4, &(0x7f00000005c0)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c00fec9000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x60000004}, {&(0x7f0000000140)="fcba5820c3ef1b77e8a23dd18b16961616356dd7fdeb89769b12def3b6cfd1ab4505524f78c1aa2bf4de120e650f04d278edd8006ad9f89c8b6d8ed96e63d878ff15074525d84e21090fcf500adea45e5683baf409b890f14dec72b7819a765b1f523b740006fa097ad63376050c8f865b5ffbd88b998d1665f951439c15e32429223f310ee8e4d1652b156fd2a1b1c7deec970e41e7a4", 0x97, 0x6}, {&(0x7f0000000540)="cf0bebc68bcb2d82b3b882d3290de23f5ccc2df9e6c3a93ab433fa0cb3ad7298a0b8a27d7f6174731a23ada1c27f19b24cdfb9fe1ddfd8557468298c9a09abcf33839e5b781206487a4cd5c369cf1d58208db3d476c2ef11a9ca4cac4ffb168c5cc0fce77801944fbc9f1097acd0e94fa12eefa55be1aca728a01b466b3de671", 0x80, 0x9}], 0x80802, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x10) creat(&(0x7f0000000100)='./file1\x00', 0x4) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48400000000000000000000ad75c49db38e00a2f", @ANYRES32=0x0, @ANYBLOB="03000000000000002800128008000100736974001c00028008000100", @ANYRES32=0x0, @ANYBLOB="088600000000000000000e8100000000"], 0x48}}, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x8, 0x5, 0x1, 0x6}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8c0) dup(0xffffffffffffffff) 01:19:16 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:17 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x4602) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='autofs\x00', 0x2400, &(0x7f0000000400)='proc\'\'bdevvmnet0#proc/-ppp1+\x00') 01:19:17 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r2, @ANYBLOB="0a1a0100aaaaaaaaaaaa0000"], 0x48}}, 0x0) 01:19:17 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) [ 216.943890] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 216.943901] XFS (loop4): Unmount and run xfs_repair [ 216.943911] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 216.943928] 000000008b92c2a6: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 216.943940] 000000009e20d32f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 216.943953] 000000007035253e: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 216.943965] 00000000096d3180: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 216.943975] 00000000985483a0: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 216.943986] 000000007438f30a: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 216.943996] 0000000002d19f58: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 216.944007] 00000000afd46266: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 216.944042] XFS (loop4): SB validate failed with error -117. [ 217.253244] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 217.253277] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 217.253285] XFS (loop4): Unmount and run xfs_repair [ 217.253295] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 217.253309] 000000008b0a9996: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 217.253321] 00000000da90f4a7: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 217.253332] 000000004bc52000: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 217.253344] 000000000ded7239: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 217.253357] 0000000061bf5f89: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 217.253368] 00000000d3a5b14c: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 217.253380] 000000009a9dcc13: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 217.253392] 0000000079e027d1: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 217.253416] XFS (loop4): SB validate failed with error -117. [ 217.488806] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.508709] batman_adv: Cannot find parent device [ 217.521563] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.639885] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 217.639922] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 217.639930] XFS (loop4): Unmount and run xfs_repair [ 217.639941] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 217.639954] 00000000558512f7: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 217.639964] 00000000482b1544: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 217.639975] 0000000054888d91: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 217.639985] 00000000ca6bb422: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 217.639997] 00000000ef55fb50: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 217.640007] 00000000c93cb18f: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 217.640018] 00000000b5c81553: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 217.640029] 000000001216e8a1: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. 01:19:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000040)={0x8, 'vlan1\x00', {'veth1_to_bridge\x00'}, 0xfff}) ioctl$SG_IO(r0, 0x2285, &(0x7f00000014c0)={0x53, 0xfffffffffffffffc, 0x6, 0x1, @scatter={0x1, 0x200000, &(0x7f0000000300)=[{&(0x7f0000000100)=""/150, 0x96}]}, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00', 0x0, 0x1, 0x0, 0x0, 0x0}) 01:19:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:17 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x4602) 01:19:17 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) [ 217.640052] XFS (loop4): SB validate failed with error -117. 01:19:18 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:18 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) 01:19:18 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:18 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:18 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:18 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) [ 218.462046] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 218.462083] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 218.462091] XFS (loop4): Unmount and run xfs_repair [ 218.462102] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 218.462117] 00000000bea77f1b: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 218.462127] 00000000d3a7f8fb: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 218.462138] 0000000050a21fc4: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 218.462150] 00000000c98fb62f: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 218.462307] 00000000ac98fb26: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 218.462320] 000000004a1804aa: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 218.462331] 000000007de22ad7: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 218.462344] 00000000f61764d4: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 218.462370] XFS (loop4): SB validate failed with error -117. [ 218.721403] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 218.721439] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 218.721448] XFS (loop4): Unmount and run xfs_repair [ 218.721458] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 218.721473] 00000000a0e0dcdc: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 218.721485] 000000000c9f006d: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 218.721496] 00000000cc0d4c05: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 218.721507] 000000003c97a322: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 218.721519] 00000000f1be7e2f: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 218.721530] 0000000067729e59: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 218.721542] 00000000c4f9dae3: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 218.721553] 00000000d09b044a: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 218.721578] XFS (loop4): SB validate failed with error -117. [ 219.050094] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 219.050129] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 219.050137] XFS (loop4): Unmount and run xfs_repair [ 219.050149] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 219.050163] 000000000c4aed48: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 219.050176] 00000000d5596594: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 219.050187] 0000000061241c06: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 219.050199] 000000007050865f: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 219.050210] 000000009e248c62: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 219.050221] 00000000d0016c20: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 219.050232] 00000000744967e1: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... 01:19:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:19 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:19 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) [ 219.050243] 0000000046bdf47d: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 219.050267] XFS (loop4): SB validate failed with error -117. 01:19:19 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:19 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) 01:19:19 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:19 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:19 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:19 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) 01:19:19 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 219.620182] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 219.620213] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 219.620222] XFS (loop4): Unmount and run xfs_repair [ 219.620240] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 219.620254] 0000000070df24e6: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 219.620266] 00000000ae03a84d: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 219.620277] 000000000ed39e32: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 219.620289] 0000000091018f07: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 219.620300] 00000000f594e008: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 219.620311] 000000005f5e8f16: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 219.620321] 00000000a96a4336: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 219.620332] 00000000e5665617: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 219.620439] XFS (loop4): SB validate failed with error -117. [ 220.023369] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 220.023400] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 220.023407] XFS (loop4): Unmount and run xfs_repair [ 220.023416] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 220.023428] 00000000ce57f56b: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 220.023439] 0000000067468d8f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 220.023448] 0000000042eba416: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 220.023457] 000000003645b601: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 220.023467] 000000007c2d5d71: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 220.023476] 000000007cdf638c: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 220.023486] 00000000de951f2b: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 220.023496] 00000000d6d22132: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 220.023544] XFS (loop4): SB validate failed with error -117. [ 220.360684] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 220.360715] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 220.360723] XFS (loop4): Unmount and run xfs_repair [ 220.360732] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 220.360745] 000000004ac244f3: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 220.360756] 00000000e0c0b7c6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 220.360766] 000000004c6053cc: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 220.360777] 00000000110b275a: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 220.360787] 0000000082c5482f: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 220.360797] 00000000553d6515: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 220.360808] 000000004270c7cb: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 220.360818] 00000000c43e06ba: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 220.360869] XFS (loop4): SB validate failed with error -117. 01:19:20 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:20 executing program 4: syz_mount_image$xfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x4602) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r4, 0xc06c4124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = dup(r1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x6c}]}}}]}, 0x3c}}, 0x0) 01:19:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:21 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:21 executing program 4: syz_mount_image$xfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:21 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:21 executing program 4: syz_mount_image$xfs(0x0, &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:21 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:21 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', 0x0, 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:21 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:21 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', 0x0, 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:21 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:22 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', 0x0, 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:22 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:22 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:22 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:22 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:22 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) pipe(&(0x7f0000000100)) [ 222.666376] XFS (loop4): Invalid superblock magic number 01:19:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:22 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 222.970019] XFS (loop4): Invalid superblock magic number 01:19:22 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682a9b3a64064fe13b9b8213de7328e70", 0xf4}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:22 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 01:19:22 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 01:19:23 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:23 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 01:19:23 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) [ 223.271018] XFS (loop4): Invalid superblock magic number [ 223.598761] XFS (loop4): Invalid superblock magic number 01:19:23 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:23 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 01:19:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:23 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 01:19:23 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 01:19:23 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:23 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 01:19:23 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 01:19:24 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x0, &(0x7f0000000380), 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:24 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 01:19:24 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 01:19:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 223.986459] XFS (loop4): Invalid superblock magic number [ 224.302443] XFS (loop4): Invalid superblock magic number 01:19:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:24 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:24 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x0, &(0x7f0000000380), 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:24 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:24 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:24 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x0, &(0x7f0000000380), 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:24 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:24 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) [ 224.673264] XFS (loop4): Invalid superblock magic number [ 224.847328] XFS (loop4): Invalid superblock magic number [ 225.205354] XFS (loop4): Invalid superblock magic number 01:19:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:25 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:25 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 01:19:25 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{0x0}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:25 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:25 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{0x0}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:25 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:25 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{0x0}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:25 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) [ 225.778244] XFS (loop4): Invalid superblock magic number 01:19:26 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 01:19:26 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) [ 226.145655] XFS (loop4): Invalid superblock magic number 01:19:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, 0x0, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:26 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:26 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:26 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:26 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x44, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x74}}, 0x0) 01:19:26 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:26 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 01:19:26 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 01:19:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, 0x0, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:26 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)) 01:19:26 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) [ 226.517276] XFS (loop4): Invalid superblock magic number [ 226.771493] XFS (loop4): Invalid superblock magic number [ 227.185942] XFS (loop4): Invalid superblock magic number 01:19:26 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 01:19:26 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:27 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x3c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x6c}}, 0x0) 01:19:27 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x34, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x99}]}}]}, 0x64}}, 0x0) 01:19:27 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c09", 0x7a}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:27 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x2c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}]}}]}, 0x5c}}, 0x0) [ 227.584495] XFS (loop4): Invalid superblock magic number [ 227.996924] XFS (loop4): SB sanity check failed [ 227.996961] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 227.996969] XFS (loop4): Unmount and run xfs_repair [ 227.996980] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 227.996996] 00000000dcbcf3f3: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 227.997007] 000000009f8b7bd7: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.997020] 0000000042a162f2: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 227.997033] 000000006cbe3986: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 227.997045] 0000000098c9595b: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:19:27 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c09", 0x7a}], 0x0, 0x0) pipe(&(0x7f0000000100)) [ 227.997058] 000000007d29175f: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 227.997070] 000000009fc1336e: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 227.997082] 0000000074f40e22: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ 01:19:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, 0x0, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 227.997109] XFS (loop4): SB validate failed with error -117. 01:19:27 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x24, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0xd8}]}}]}, 0x54}}, 0x0) 01:19:28 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x0) [ 228.345251] XFS (loop4): SB sanity check failed [ 228.345285] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 228.345294] XFS (loop4): Unmount and run xfs_repair [ 228.345304] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 228.345318] 00000000130e3543: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 228.345331] 00000000d0fd1ded: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 228.345343] 000000002b976194: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 228.345354] 00000000baf6c093: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 228.345367] 0000000097daec2e: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 228.345379] 00000000b4233468: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 228.345389] 0000000009c3aa65: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 228.345400] 00000000f0aa389e: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 228.345424] XFS (loop4): SB validate failed with error -117. 01:19:28 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)) 01:19:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, 0x0, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:28 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c09", 0x7a}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:28 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x0) 01:19:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:28 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x0) 01:19:29 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x24, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8}]}}]}, 0x54}}, 0x0) 01:19:29 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e3", 0xb7}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:29 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffea}, @TCA_CAKE_MPU={0x8}]}}]}, 0x4c}}, 0x0) 01:19:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, 0x0, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 229.246658] XFS (loop4): SB sanity check failed 01:19:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 229.246693] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 229.246701] XFS (loop4): Unmount and run xfs_repair 01:19:29 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_MPU={0x8}]}}]}, 0x44}}, 0x0) [ 229.246712] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 229.246726] 00000000c6528c5b: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 229.246739] 000000006550a599: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 229.246750] 000000008eab0461: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 229.246763] 00000000625f7bcc: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 229.246781] 00000000d1604c66: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 229.246793] 000000001ab9b22a: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 229.246805] 00000000dccc03e2: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 229.246816] 00000000b6be1087: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 229.246840] XFS (loop4): SB validate failed with error -117. [ 229.693615] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 229.693650] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 229.693658] XFS (loop4): Unmount and run xfs_repair [ 229.693668] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 229.693682] 000000007febbd1a: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 229.693695] 00000000c192091b: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 229.693706] 0000000048542bf8: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 229.693718] 000000005ad0a977: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 229.693730] 00000000562700df: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 229.693741] 00000000c5ee600c: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 229.693752] 00000000749c0aaa: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 229.693764] 0000000027465825: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 229.693788] XFS (loop4): SB validate failed with error -117. 01:19:30 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:30 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e3", 0xb7}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:30 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8}]}}]}, 0x3c}}, 0x0) 01:19:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:30 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)) 01:19:30 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e3", 0xb7}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:30 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="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", 0x146}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x3}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_get$pid(0x0, r0) write$FUSE_LSEEK(r1, &(0x7f0000000140)={0x18, 0x0, 0x7, {0x7ff}}, 0x18) close(r2) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x4602) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="9f6e3b303b859048ff210db12d96b4bb2357fde7ad00a84f444287d60882483e526f5a3d98ee8aef", 0x28}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x2c8803) ptrace$cont(0x20, r0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000001800)="7e58eed848255399dabfa992b832519025b14ed1c9f080734b08e6fd32f9d1cb13b6ccfc5e83a9069f5bf5de13216a8cfeb2e0b6c0b9316c1838a8b1a951abd21f86a0f8702182ebff40fb5a377a3994b75eea3eae4990a5986f520c8b18b72f0b924bf84f6f7a8a68eb3b26a5c0deaf67ce92b871891bff516a02d6debb284098ba9b3f15aafad1b6") [ 230.786041] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 230.786076] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 230.786083] XFS (loop4): Unmount and run xfs_repair [ 230.786093] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 230.786106] 0000000048b06d0e: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ 01:19:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:31 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)) 01:19:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 230.786119] 00000000b119326c: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 230.786130] 00000000a38aa7b8: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 230.786140] 00000000f14aef9c: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 230.786160] 00000000e06bce5b: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:19:31 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08", 0xd6}], 0x0, 0x0) pipe(&(0x7f0000000100)) [ 230.786171] 000000004dc33f0c: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 230.786183] 0000000068d8fc47: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 230.786194] 00000000474cee62: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 230.786220] XFS (loop4): SB validate failed with error -117. [ 231.176231] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 231.176266] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 231.176274] XFS (loop4): Unmount and run xfs_repair [ 231.176285] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 231.176301] 00000000772fc0e0: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 231.176313] 00000000d3a5fa96: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 231.176326] 0000000095805076: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 231.176338] 00000000310f4f17: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 231.176349] 00000000a5e8300b: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 231.176361] 0000000027b12fa8: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 231.176373] 000000001fd98e21: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 231.176385] 0000000067340f08: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. 01:19:31 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:19:31 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c09", 0x7a}], 0x0, 0x0) pipe(&(0x7f0000000100)) [ 231.176411] XFS (loop4): SB validate failed with error -117. [ 231.522521] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. 01:19:31 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08", 0xd6}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:31 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:31 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08", 0xd6}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:31 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) [ 231.588940] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 231.588948] XFS (loop4): Unmount and run xfs_repair [ 231.588955] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 231.588970] 000000008a87bce8: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 231.589016] 00000000c6e9f070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 231.589025] 000000001651f0d3: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 231.589033] 00000000e76dd297: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 231.589045] 000000007552b8f4: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 231.589152] 00000000bd92dc2e: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 231.589160] 00000000e2e735b2: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 231.589168] 000000008b4e0363: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 231.589196] XFS (loop4): SB validate failed with error -117. [ 231.756325] XFS (loop3): SB sanity check failed [ 231.756357] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 231.756366] XFS (loop3): Unmount and run xfs_repair [ 231.756376] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 231.756390] 00000000175f0c6a: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 231.756401] 000000005aa8ba20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 231.756413] 000000002faac9dc: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 231.756423] 00000000484dfaf1: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 231.756435] 0000000081744b90: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 231.756445] 00000000842eeb2b: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 231.756514] 000000009cda6728: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 231.756525] 00000000c4f79d63: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 231.756605] XFS (loop3): SB validate failed with error -117. [ 231.817239] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 231.817272] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 231.817280] XFS (loop4): Unmount and run xfs_repair [ 231.817291] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 231.817306] 000000007f3ecece: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 231.817319] 0000000030b2c5a3: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 231.817331] 00000000290a0e3c: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 231.817343] 000000004b5db322: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:19:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 231.817355] 000000001458d9ce: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 231.817367] 00000000fc50c185: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 231.817378] 00000000d3763b54: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 231.817390] 00000000698c21a3: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 231.817414] XFS (loop4): SB validate failed with error -117. [ 232.143574] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. 01:19:32 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d8429b682", 0xe5}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 232.386932] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 232.386940] XFS (loop4): Unmount and run xfs_repair [ 232.386949] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 232.386961] 00000000c841b71f: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 232.386970] 000000003a66d309: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 232.386980] 00000000d60d6667: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 232.386989] 00000000a743f317: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 232.386999] 00000000a857694e: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 232.387009] 00000000e7506fec: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 232.387018] 00000000099658c4: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 232.387028] 000000008871cada: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 232.387059] XFS (loop4): SB validate failed with error -117. [ 232.639465] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 232.639501] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 232.639508] XFS (loop4): Unmount and run xfs_repair [ 232.639517] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 232.639529] 00000000855fdfd1: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 232.639539] 000000009d4873e7: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 232.639549] 000000003fe801e8: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 232.639558] 00000000fe528dea: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 232.639568] 0000000054214aa3: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 232.639577] 0000000087a35c7f: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 232.639587] 00000000a705bfbb: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 232.639596] 00000000ac498877: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 232.639616] XFS (loop4): SB validate failed with error -117. 01:19:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:32 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08", 0xd6}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:32 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 01:19:32 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08", 0xd6}], 0x0, 0x0) pipe(&(0x7f0000000100)) [ 233.109001] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 233.109032] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 233.109039] XFS (loop4): Unmount and run xfs_repair [ 233.109050] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 233.109063] 0000000086e36629: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 233.109075] 00000000913175cd: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 233.109085] 00000000e89f722b: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 233.109096] 0000000081a20365: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 233.109106] 000000001b1f0b62: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 233.109121] 000000006615b0a1: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 233.109173] 00000000c2588754: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... 01:19:33 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 01:19:33 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:19:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 233.109184] 000000001cb51bdf: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 233.109271] XFS (loop4): SB validate failed with error -117. [ 233.499204] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. 01:19:33 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08", 0xd6}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:33 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1", 0xde}], 0x0, 0x0) pipe(&(0x7f0000000100)) [ 233.519583] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 233.519594] XFS (loop4): Unmount and run xfs_repair [ 233.519605] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 233.519620] 0000000077cbb6e8: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 233.519633] 00000000cf85590a: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:33 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') [ 233.519645] 000000004951b04f: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 233.519658] 00000000ff5c0ae0: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 233.519669] 000000002c025b7c: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 233.519681] 0000000074eca848: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 233.519693] 000000009a2e569f: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 233.519705] 0000000049b85929: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 233.519739] XFS (loop4): SB validate failed with error -117. [ 233.797326] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 233.797357] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 233.797365] XFS (loop4): Unmount and run xfs_repair [ 233.797374] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 233.797388] 0000000047f3fd85: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 233.797399] 000000006b98ab26: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 233.797410] 00000000a457245a: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 233.797421] 0000000018654494: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 233.797431] 0000000087965921: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 233.797442] 0000000037ee1f4a: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 233.797453] 0000000011805240: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... 01:19:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 233.797464] 00000000595dde02: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 233.797525] XFS (loop4): SB validate failed with error -117. [ 234.222046] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. 01:19:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 234.629996] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 234.630006] XFS (loop4): Unmount and run xfs_repair [ 234.630016] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 234.630031] 00000000deeb2007: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ 01:19:34 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 01:19:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:34 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1", 0xde}], 0x0, 0x0) pipe(&(0x7f0000000100)) [ 234.630042] 000000009e73f01d: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 234.630054] 00000000f4569359: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 234.630065] 00000000e6f6e397: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 234.630077] 00000000841cc99f: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 234.630088] 0000000089893386: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 234.630099] 0000000047441407: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 234.630111] 000000001f89e415: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 234.630147] XFS (loop4): SB validate failed with error -117. 01:19:34 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:34 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1", 0xde}], 0x0, 0x0) pipe(&(0x7f0000000100)) [ 235.039354] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 235.039396] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 235.039404] XFS (loop4): Unmount and run xfs_repair [ 235.039440] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 235.039455] 00000000029d777a: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 235.039467] 0000000009a9e9a5: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 235.039480] 00000000e497ebbc: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 235.039492] 000000000c5bee58: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 235.039504] 00000000ae8ee3b3: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 235.039517] 00000000c6073245: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 235.039529] 00000000cddfaf0e: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 235.039541] 000000000f0d9391: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 235.039567] XFS (loop4): SB validate failed with error -117. 01:19:35 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d84", 0xe2}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:35 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') [ 235.368217] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 235.368251] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 235.368261] XFS (loop4): Unmount and run xfs_repair [ 235.368272] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 235.368286] 0000000015cb3015: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 235.368299] 000000001833ea7a: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 235.368311] 00000000cc3b63a1: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 235.368323] 00000000818f5324: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 235.368336] 000000007e728775: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 235.368347] 00000000887a2091: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 235.368359] 00000000dae01b52: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 235.368370] 0000000000db2177: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 235.368395] XFS (loop4): SB validate failed with error -117. 01:19:35 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff", 0xdf}], 0x0, 0x0) pipe(&(0x7f0000000100)) [ 235.729667] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. 01:19:35 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 235.729700] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 235.729709] XFS (loop4): Unmount and run xfs_repair [ 235.729719] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 235.729733] 00000000f9ae7bca: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 235.729745] 000000006b6dcdec: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 235.729808] 00000000b9bf8d2c: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 235.729820] 0000000048a15251: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 235.729837] 000000006b37d44e: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 235.729849] 00000000db175b5d: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 235.729860] 00000000059eb95c: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 235.729872] 0000000015a86985: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 235.729899] XFS (loop4): SB validate failed with error -117. 01:19:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) [ 236.052531] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 236.052561] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 236.052568] XFS (loop4): Unmount and run xfs_repair 01:19:35 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff", 0xdf}], 0x0, 0x0) pipe(&(0x7f0000000100)) [ 236.052577] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 236.052590] 000000001b53f2d6: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 236.052600] 000000008175a8b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 236.052611] 0000000052a4ee1e: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 236.052621] 000000004d2376b0: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 236.052631] 00000000f88cf5ea: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:19:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 236.052641] 00000000cbeac5b7: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 236.052651] 000000002a305316: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 236.052661] 00000000838aef2f: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 236.052682] XFS (loop4): SB validate failed with error -117. [ 236.328835] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 236.328866] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff 01:19:36 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff", 0xdf}], 0x0, 0x0) pipe(&(0x7f0000000100)) [ 236.328874] XFS (loop4): Unmount and run xfs_repair [ 236.328883] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 236.328895] 000000009df5f99b: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 236.328906] 00000000d871ade4: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 236.328916] 00000000c7a6a982: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 236.328926] 00000000ee11a464: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 236.328936] 000000009578f6b5: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 236.328946] 00000000017434c3: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 236.328957] 00000000fd3e2958: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 236.328967] 0000000092dc2a15: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 236.328987] XFS (loop4): SB validate failed with error -117. 01:19:36 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(&(0x7f0000000100)) [ 236.559353] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 236.559388] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 236.559396] XFS (loop4): Unmount and run xfs_repair [ 236.559406] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 236.559419] 00000000935640fe: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 236.559429] 000000009d4a1a74: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:36 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') [ 236.559435] 0000000005dfccfb: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 236.559441] 00000000f56d5f6c: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 236.559447] 000000002ceeb596: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 236.559453] 00000000e8d591dc: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 236.559458] 00000000d4dd740c: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... 01:19:36 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') [ 236.559464] 00000000c8b2ca4c: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 236.559480] XFS (loop4): SB validate failed with error -117. [ 236.863669] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. 01:19:36 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') [ 236.920261] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 236.920270] XFS (loop4): Unmount and run xfs_repair [ 236.920280] XFS (loop4): First 128 bytes of corrupted metadata buffer: 01:19:36 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff43", 0xe0}], 0x0, 0x0) pipe(&(0x7f0000000100)) [ 236.920293] 000000000a66839b: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 236.920303] 0000000066cf8f04: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 236.920314] 0000000074a8c543: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 236.920324] 0000000023f0ad0d: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 236.920334] 00000000a9d2c08e: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 236.920344] 00000000a3c718b4: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 236.920355] 00000000e7688a4b: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... 01:19:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 236.920365] 000000006c889b95: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 236.920398] XFS (loop4): SB validate failed with error -117. 01:19:36 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff43", 0xe0}], 0x0, 0x0) pipe(&(0x7f0000000100)) 01:19:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 237.150893] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 237.150927] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 237.150936] XFS (loop4): Unmount and run xfs_repair [ 237.150947] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 237.150961] 000000004a24e1cd: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 237.150974] 00000000645ec198: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 237.150986] 00000000c0a7371b: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 237.150998] 0000000052e8179d: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 237.151008] 000000006b70752d: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 237.151021] 0000000019b94d47: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 237.151031] 0000000073d16c0f: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 237.151041] 000000000817d92f: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. 01:19:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) [ 237.151067] XFS (loop4): SB validate failed with error -117. [ 237.395731] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. 01:19:37 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff43", 0xe0}], 0x0, 0x0) pipe(&(0x7f0000000100)) [ 237.418729] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 237.418739] XFS (loop4): Unmount and run xfs_repair [ 237.418749] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 237.418765] 000000007ddd9ad5: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 237.418778] 0000000071660819: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 237.418790] 000000006b7a0e0e: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 237.418801] 00000000db237755: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 237.418812] 00000000abd0d2cb: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 237.418823] 0000000067d0314a: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 237.418834] 0000000032941ed3: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 237.418846] 0000000066e28705: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 237.418878] XFS (loop4): SB validate failed with error -117. [ 237.672324] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 237.672356] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 237.672365] XFS (loop4): Unmount and run xfs_repair [ 237.672375] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 237.672388] 00000000606216a8: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 237.672399] 00000000eb28c9f6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 237.672410] 00000000ea2e6ae6: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 237.672421] 0000000061e68aed: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 237.672432] 00000000c70fee7b: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 237.672443] 00000000e056d29d: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 237.672454] 000000006461aebb: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 237.672465] 00000000ee1a38f3: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 237.672645] XFS (loop4): SB validate failed with error -117. 01:19:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:37 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:19:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 238.012445] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 238.012483] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 238.012492] XFS (loop4): Unmount and run xfs_repair 01:19:37 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d84", 0xe2}], 0x0, 0x0) pipe(&(0x7f0000000100)) [ 238.012503] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 238.012518] 00000000cfe76304: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 238.012530] 000000005fd5664b: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 238.012542] 0000000002f8a2c1: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 238.012554] 0000000023bfbb59: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 238.012565] 000000008076b12d: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 238.012576] 00000000800bec7c: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 238.012588] 0000000094db095e: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 238.012599] 000000002c4ba457: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 238.012627] XFS (loop4): SB validate failed with error -117. 01:19:38 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 238.273931] XFS (loop4): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 238.273963] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 238.273969] XFS (loop4): Unmount and run xfs_repair [ 238.273978] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 238.273992] 0000000026e642da: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 238.274003] 00000000cfb2abbf: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 238.274013] 00000000a3104759: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 238.274024] 00000000b05d6384: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:19:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 238.274034] 00000000875d3a0b: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 238.274044] 00000000319fae6d: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 238.274054] 00000000397e0589: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 238.274065] 00000000038de394: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 238.274085] XFS (loop4): SB validate failed with error -117. 01:19:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) 01:19:38 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:19:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:38 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 01:19:39 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:39 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:39 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 01:19:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:39 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:39 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 01:19:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:39 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:39 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:40 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:40 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:40 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:40 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:40 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:40 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:40 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:40 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:41 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:41 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:41 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:41 executing program 2: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:41 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r3, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:41 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:41 executing program 2: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:41 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:41 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:41 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:41 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:41 executing program 2: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:42 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:42 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:42 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:42 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:42 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:42 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:43 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:19:43 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:43 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:44 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:44 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:44 executing program 1: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:44 executing program 3 (fault-call:0 fault-nth:0): syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:19:44 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) 01:19:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:44 executing program 3 (fault-call:0 fault-nth:1): syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:19:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:44 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) 01:19:44 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:44 executing program 1: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') [ 244.552284] FAULT_INJECTION: forcing a failure. [ 244.552284] name failslab, interval 1, probability 0, space 0, times 1 01:19:44 executing program 3 (fault-call:0 fault-nth:2): syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 244.552303] CPU: 0 PID: 10033 Comm: syz-executor.3 Not tainted 4.19.120-syzkaller #0 [ 244.552312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.552318] Call Trace: [ 244.552456] dump_stack+0x188/0x20d [ 244.552532] should_fail.cold+0xa/0x1b [ 244.552551] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 244.552582] __should_failslab+0x115/0x180 [ 244.552598] should_failslab+0x5/0xf [ 244.552609] __kmalloc+0x2d3/0x770 [ 244.552622] ? __x64_sys_memfd_create+0x131/0x450 [ 244.552637] ? vfs_write+0x15b/0x550 [ 244.552648] ? strnlen_user+0x158/0x1d0 [ 244.552664] __x64_sys_memfd_create+0x131/0x450 [ 244.552678] ? memfd_fcntl+0x16b0/0x16b0 [ 244.552693] ? __ia32_sys_clock_settime+0x260/0x260 [ 244.552709] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 244.552724] ? trace_hardirqs_off_caller+0x55/0x210 [ 244.552740] ? do_syscall_64+0x21/0x620 [ 244.552759] do_syscall_64+0xf9/0x620 [ 244.552815] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.552829] RIP: 0033:0x45c829 [ 244.552843] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 244.552851] RSP: 002b:00007fa0b4446a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 244.552866] RAX: ffffffffffffffda RBX: 00000000005089c0 RCX: 000000000045c829 [ 244.552972] RDX: 0000000020000398 RSI: 0000000000000000 RDI: 00000000004c1991 [ 244.552986] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 244.552994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 244.553002] R13: 0000000000000bf8 R14: 00000000004ce1e5 R15: 00007fa0b44476d4 [ 244.653233] FAULT_INJECTION: forcing a failure. [ 244.653233] name failslab, interval 1, probability 0, space 0, times 0 [ 244.653253] CPU: 0 PID: 10042 Comm: syz-executor.3 Not tainted 4.19.120-syzkaller #0 [ 244.653262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.653267] Call Trace: [ 244.653289] dump_stack+0x188/0x20d [ 244.653311] should_fail.cold+0xa/0x1b [ 244.653329] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 244.653355] __should_failslab+0x115/0x180 [ 244.653371] should_failslab+0x5/0xf [ 244.653383] kmem_cache_alloc+0x29f/0x710 [ 244.653400] ? find_held_lock+0x2d/0x110 [ 244.653415] ? __alloc_fd+0x43c/0x550 [ 244.653433] ? shmem_destroy_callback+0xb0/0xb0 [ 244.653449] shmem_alloc_inode+0x18/0x40 [ 244.653465] ? shmem_destroy_callback+0xb0/0xb0 [ 244.653476] alloc_inode+0x5d/0x180 [ 244.653490] new_inode_pseudo+0x14/0xe0 [ 244.653504] new_inode+0x1b/0x40 [ 244.653519] shmem_get_inode+0x84/0x780 [ 244.653538] __shmem_file_setup.part.0+0x7a/0x2b0 [ 244.653555] shmem_file_setup+0x61/0x90 [ 244.653571] __x64_sys_memfd_create+0x28a/0x450 [ 244.653584] ? memfd_fcntl+0x16b0/0x16b0 [ 244.653598] ? __ia32_sys_clock_settime+0x260/0x260 [ 244.653614] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 244.653628] ? trace_hardirqs_off_caller+0x55/0x210 [ 244.653644] ? do_syscall_64+0x21/0x620 [ 244.653663] do_syscall_64+0xf9/0x620 [ 244.653681] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.653692] RIP: 0033:0x45c829 [ 244.653706] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 244.653714] RSP: 002b:00007fa0b4446a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 244.653727] RAX: ffffffffffffffda RBX: 00000000005089c0 RCX: 000000000045c829 [ 244.653735] RDX: 0000000020000398 RSI: 0000000000000000 RDI: 00000000004c1991 [ 244.653750] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 244.653759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 244.653767] R13: 0000000000000bf8 R14: 00000000004ce1e5 R15: 00007fa0b44476d4 [ 244.783121] FAULT_INJECTION: forcing a failure. [ 244.783121] name failslab, interval 1, probability 0, space 0, times 0 [ 244.783140] CPU: 0 PID: 10056 Comm: syz-executor.3 Not tainted 4.19.120-syzkaller #0 [ 244.783149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.783154] Call Trace: [ 244.783177] dump_stack+0x188/0x20d [ 244.783198] should_fail.cold+0xa/0x1b [ 244.783216] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 244.783242] __should_failslab+0x115/0x180 [ 244.783258] should_failslab+0x5/0xf [ 244.783270] kmem_cache_alloc+0x29f/0x710 [ 244.783286] ? __put_user_ns+0x60/0x60 [ 244.783307] selinux_inode_alloc_security+0xb1/0x2a0 [ 244.783324] security_inode_alloc+0x83/0xd0 [ 244.783343] inode_init_always+0x5a3/0xb80 [ 244.783357] alloc_inode+0x7a/0x180 [ 244.783369] new_inode_pseudo+0x14/0xe0 [ 244.783381] new_inode+0x1b/0x40 [ 244.783396] shmem_get_inode+0x84/0x780 [ 244.783413] __shmem_file_setup.part.0+0x7a/0x2b0 [ 244.783428] shmem_file_setup+0x61/0x90 [ 244.783442] __x64_sys_memfd_create+0x28a/0x450 [ 244.783456] ? memfd_fcntl+0x16b0/0x16b0 [ 244.783470] ? __ia32_sys_clock_settime+0x260/0x260 [ 244.783486] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 244.783500] ? trace_hardirqs_off_caller+0x55/0x210 [ 244.783517] ? do_syscall_64+0x21/0x620 [ 244.783535] do_syscall_64+0xf9/0x620 [ 244.783561] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.783573] RIP: 0033:0x45c829 [ 244.783588] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 244.783596] RSP: 002b:00007fa0b4446a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 244.783610] RAX: ffffffffffffffda RBX: 00000000005089c0 RCX: 000000000045c829 [ 244.783618] RDX: 0000000020000398 RSI: 0000000000000000 RDI: 00000000004c1991 [ 244.783627] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 244.783635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 244.783643] R13: 0000000000000bf8 R14: 00000000004ce1e5 R15: 00007fa0b44476d4 [ 245.160503] NOHZ: local_softirq_pending 08 01:19:45 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:45 executing program 3 (fault-call:0 fault-nth:3): syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:19:45 executing program 1: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:45 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:45 executing program 3 (fault-call:0 fault-nth:4): syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:19:45 executing program 3 (fault-call:0 fault-nth:5): syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:19:45 executing program 3 (fault-call:0 fault-nth:6): syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 245.621618] FAULT_INJECTION: forcing a failure. [ 245.621618] name failslab, interval 1, probability 0, space 0, times 0 [ 245.621636] CPU: 1 PID: 10067 Comm: syz-executor.3 Not tainted 4.19.120-syzkaller #0 [ 245.621643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.621648] Call Trace: [ 245.621665] dump_stack+0x188/0x20d [ 245.621684] should_fail.cold+0xa/0x1b [ 245.621699] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 245.621720] __should_failslab+0x115/0x180 [ 245.621733] should_failslab+0x5/0xf [ 245.621743] kmem_cache_alloc+0x29f/0x710 [ 245.621756] ? timespec64_trunc+0xf0/0x180 [ 245.621768] ? inode_init_owner+0x330/0x330 [ 245.621785] __d_alloc+0x2b/0x9e0 [ 245.621808] d_alloc_pseudo+0x19/0x70 [ 245.621824] alloc_file_pseudo+0xc6/0x250 [ 245.621899] ? check_preemption_disabled+0x41/0x280 [ 245.621913] ? alloc_file+0x4d0/0x4d0 [ 245.621928] ? lockdep_annotate_inode_mutex_key+0x3c/0x70 [ 245.621945] ? shmem_get_inode+0x433/0x780 [ 245.621962] __shmem_file_setup.part.0+0x102/0x2b0 [ 245.621976] shmem_file_setup+0x61/0x90 [ 245.621990] __x64_sys_memfd_create+0x28a/0x450 [ 245.622001] ? memfd_fcntl+0x16b0/0x16b0 [ 245.622013] ? __ia32_sys_clock_settime+0x260/0x260 [ 245.622026] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 245.622038] ? trace_hardirqs_off_caller+0x55/0x210 [ 245.622052] ? do_syscall_64+0x21/0x620 [ 245.622067] do_syscall_64+0xf9/0x620 [ 245.622082] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 245.622091] RIP: 0033:0x45c829 [ 245.622103] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 245.622109] RSP: 002b:00007fa0b4446a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 245.622120] RAX: ffffffffffffffda RBX: 00000000005089c0 RCX: 000000000045c829 [ 245.622127] RDX: 0000000020000398 RSI: 0000000000000000 RDI: 00000000004c1991 [ 245.622134] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 245.622141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 245.622147] R13: 0000000000000bf8 R14: 00000000004ce1e5 R15: 00007fa0b44476d4 [ 245.705788] FAULT_INJECTION: forcing a failure. [ 245.705788] name failslab, interval 1, probability 0, space 0, times 0 [ 245.705806] CPU: 1 PID: 10076 Comm: syz-executor.3 Not tainted 4.19.120-syzkaller #0 [ 245.705815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.705819] Call Trace: [ 245.705838] dump_stack+0x188/0x20d [ 245.705857] should_fail.cold+0xa/0x1b [ 245.705873] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 245.705896] __should_failslab+0x115/0x180 [ 245.705909] should_failslab+0x5/0xf [ 245.705920] kmem_cache_alloc+0x29f/0x710 [ 245.705932] ? d_instantiate+0x75/0x90 [ 245.705951] __alloc_file+0x21/0x330 [ 245.705965] alloc_empty_file+0x6d/0x170 [ 245.705979] alloc_file+0x5e/0x4d0 [ 245.705995] alloc_file_pseudo+0x165/0x250 [ 245.706009] ? alloc_file+0x4d0/0x4d0 [ 245.706028] ? shmem_get_inode+0x433/0x780 [ 245.706045] __shmem_file_setup.part.0+0x102/0x2b0 [ 245.706059] shmem_file_setup+0x61/0x90 [ 245.706072] __x64_sys_memfd_create+0x28a/0x450 [ 245.706083] ? memfd_fcntl+0x16b0/0x16b0 [ 245.706095] ? __ia32_sys_clock_settime+0x260/0x260 [ 245.706109] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 245.706121] ? trace_hardirqs_off_caller+0x55/0x210 [ 245.706135] ? do_syscall_64+0x21/0x620 [ 245.706150] do_syscall_64+0xf9/0x620 [ 245.706165] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 245.706174] RIP: 0033:0x45c829 [ 245.706185] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 245.706192] RSP: 002b:00007fa0b4446a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 245.706203] RAX: ffffffffffffffda RBX: 00000000005089c0 RCX: 000000000045c829 [ 245.706210] RDX: 0000000020000398 RSI: 0000000000000000 RDI: 00000000004c1991 [ 245.706217] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 245.706223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 245.706230] R13: 0000000000000bf8 R14: 00000000004ce1e5 R15: 00007fa0b44476d4 [ 245.782633] FAULT_INJECTION: forcing a failure. [ 245.782633] name failslab, interval 1, probability 0, space 0, times 0 [ 245.782652] CPU: 1 PID: 10084 Comm: syz-executor.3 Not tainted 4.19.120-syzkaller #0 [ 245.782661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.782666] Call Trace: [ 245.782687] dump_stack+0x188/0x20d [ 245.782710] should_fail.cold+0xa/0x1b [ 245.782726] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 245.782752] __should_failslab+0x115/0x180 [ 245.782767] should_failslab+0x5/0xf [ 245.782789] kmem_cache_alloc+0x29f/0x710 [ 245.782812] ? rcu_read_lock_sched_held+0x10a/0x130 [ 245.782835] selinux_file_alloc_security+0xaf/0x190 [ 245.782853] security_file_alloc+0x5c/0xa0 [ 245.782871] __alloc_file+0xc9/0x330 [ 245.782889] alloc_empty_file+0x6d/0x170 [ 245.782906] alloc_file+0x5e/0x4d0 [ 245.782925] alloc_file_pseudo+0x165/0x250 [ 245.782941] ? alloc_file+0x4d0/0x4d0 [ 245.782966] ? shmem_get_inode+0x433/0x780 [ 245.782985] __shmem_file_setup.part.0+0x102/0x2b0 [ 245.783002] shmem_file_setup+0x61/0x90 [ 245.783017] __x64_sys_memfd_create+0x28a/0x450 [ 245.783030] ? memfd_fcntl+0x16b0/0x16b0 [ 245.783042] ? __ia32_sys_clock_settime+0x260/0x260 [ 245.783057] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 245.783069] ? trace_hardirqs_off_caller+0x55/0x210 [ 245.783082] ? do_syscall_64+0x21/0x620 [ 245.783099] do_syscall_64+0xf9/0x620 [ 245.783118] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 245.783129] RIP: 0033:0x45c829 [ 245.783144] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 245.783152] RSP: 002b:00007fa0b4446a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 245.783165] RAX: ffffffffffffffda RBX: 00000000005089c0 RCX: 000000000045c829 [ 245.783172] RDX: 0000000020000398 RSI: 0000000000000000 RDI: 00000000004c1991 [ 245.783179] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 245.783185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 245.783193] R13: 0000000000000bf8 R14: 00000000004ce1e5 R15: 00007fa0b44476d4 [ 245.871228] FAULT_INJECTION: forcing a failure. [ 245.871228] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 245.871280] CPU: 0 PID: 10087 Comm: syz-executor.3 Not tainted 4.19.120-syzkaller #0 [ 245.871290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.871295] Call Trace: [ 245.871317] dump_stack+0x188/0x20d [ 245.871339] should_fail.cold+0xa/0x1b [ 245.871358] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 245.871385] __alloc_pages_nodemask+0x1c7/0x6a0 [ 245.871400] ? lock_downgrade+0x740/0x740 [ 245.871417] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 245.871436] ? avc_has_perm_noaudit+0x33d/0x520 [ 245.871454] alloc_pages_vma+0xd9/0x580 [ 245.871466] shmem_alloc_page+0xb0/0x170 [ 245.871475] ? shmem_swapin+0x190/0x190 [ 245.871500] ? percpu_counter_add_batch+0x123/0x180 [ 245.871513] ? __vm_enough_memory+0x319/0x590 [ 245.871526] shmem_alloc_and_acct_page+0x160/0x960 [ 245.871540] shmem_getpage_gfp+0x3fb/0x3840 [ 245.871559] ? shmem_writepage+0xf70/0xf70 [ 245.871573] ? mark_held_locks+0xa6/0xf0 [ 245.871587] ? inode_init_owner+0x330/0x330 [ 245.871673] ? iov_iter_fault_in_readable+0x1f8/0x3f0 [ 245.871691] shmem_write_begin+0x108/0x1e0 [ 245.871713] generic_perform_write+0x1f8/0x4d0 [ 245.871735] ? page_endio+0x950/0x950 [ 245.871747] ? current_time+0x140/0x140 [ 245.871764] ? lock_acquire+0x170/0x400 [ 245.871780] __generic_file_write_iter+0x24c/0x610 [ 245.871797] generic_file_write_iter+0x37f/0x729 [ 245.871817] __vfs_write+0x512/0x760 [ 245.871832] ? kernel_read+0x110/0x110 [ 245.871852] ? __lock_is_held+0xad/0x140 [ 245.871876] ? rcu_read_lock_sched_held+0x10a/0x130 [ 245.871890] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 245.871907] vfs_write+0x206/0x550 [ 245.871925] ksys_pwrite64+0x16f/0x1a0 [ 245.871941] ? __ia32_sys_pread64+0xf0/0xf0 [ 245.871957] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 245.871971] ? trace_hardirqs_off_caller+0x55/0x210 [ 245.871986] ? do_syscall_64+0x21/0x620 [ 245.872003] do_syscall_64+0xf9/0x620 [ 245.872020] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 245.872031] RIP: 0033:0x416687 [ 245.872046] Code: 12 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a1 18 00 00 c3 48 83 ec 08 e8 a7 f9 ff ff 48 89 04 24 49 89 ca b8 12 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 ed f9 ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 245.872053] RSP: 002b:00007fa0b4446a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 245.872066] RAX: ffffffffffffffda RBX: 00000000005089c0 RCX: 0000000000416687 [ 245.872075] RDX: 00000000000000e1 RSI: 0000000020000440 RDI: 0000000000000004 [ 245.872083] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 245.872091] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 245.872099] R13: 0000000000000bf8 R14: 00000000004ce1e5 R15: 00007fa0b44476d4 [ 245.963564] XFS (loop3): Invalid superblock magic number 01:19:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:46 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:46 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:19:46 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:46 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) 01:19:46 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x1, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:19:46 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x2, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:19:46 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000200)) 01:19:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:46 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) [ 246.961838] XFS (loop3): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 246.961874] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 246.961883] XFS (loop3): Unmount and run xfs_repair [ 246.961895] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 246.961909] 0000000045d99ce0: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 246.961922] 00000000ca49b602: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 246.961934] 00000000cc820d45: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 246.961945] 00000000cc4d889c: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 246.961993] 00000000985e689a: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 246.962006] 00000000ac58dcd3: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 246.962018] 00000000244c6c60: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 246.962029] 00000000a6c1e4ee: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 246.962057] XFS (loop3): SB validate failed with error -117. 01:19:47 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') [ 247.284733] XFS (loop3): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 247.284767] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 247.284775] XFS (loop3): Unmount and run xfs_repair [ 247.284785] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 247.284799] 000000004197998c: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 247.284810] 000000006cfbcdda: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 247.284821] 0000000050a877a6: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:19:47 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x3, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 247.284832] 0000000091de456f: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 247.284844] 00000000815be59e: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 247.284855] 0000000067e801db: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 247.284866] 00000000792b122e: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 247.284877] 000000003dc1787b: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 247.284927] XFS (loop3): SB validate failed with error -117. 01:19:47 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) [ 247.838099] XFS (loop3): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 247.838135] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 247.838143] XFS (loop3): Unmount and run xfs_repair [ 247.838154] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 247.838169] 0000000058bd77a5: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 247.838188] 00000000256ea0bb: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 247.838200] 00000000f3746262: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 247.838211] 00000000d9076031: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 247.838224] 00000000ed712e04: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 247.838235] 00000000392dbb71: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 247.838247] 000000006409ff3b: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... 01:19:47 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x4, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 247.838261] 000000002dab77ac: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 247.838286] XFS (loop3): SB validate failed with error -117. 01:19:47 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000200)) 01:19:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:47 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000200)) [ 248.228513] XFS (loop3): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 248.228546] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 248.228555] XFS (loop3): Unmount and run xfs_repair [ 248.228565] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 248.228580] 000000007acffa99: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 248.228592] 000000009fd40bca: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 248.228604] 0000000058bd8688: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 248.228616] 0000000033d78dc1: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 248.228629] 000000009aa356a7: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 248.228641] 0000000073d9041c: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:19:48 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x5, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 248.228653] 00000000d7382776: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 248.228665] 00000000f0e73ae9: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 248.228689] XFS (loop3): SB validate failed with error -117. [ 248.345195] XFS (loop3): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 248.345233] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 248.345242] XFS (loop3): Unmount and run xfs_repair [ 248.345253] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 248.345268] 0000000097b8be77: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 248.345281] 000000009b1b7f22: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 248.345293] 00000000cfe4b0a6: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 248.345304] 00000000705d300e: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 248.345316] 000000005c897ab6: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 248.345328] 000000006d2d60f0: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 248.345340] 00000000df062af9: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 248.345352] 000000002261aa08: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 248.345380] XFS (loop3): SB validate failed with error -117. 01:19:48 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) [ 248.603433] XFS (loop3): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 248.603461] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 248.603468] XFS (loop3): Unmount and run xfs_repair [ 248.603477] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 248.603490] 0000000054939e9c: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 248.603500] 00000000fd89340c: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 248.603510] 00000000c1f1a464: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 248.603521] 0000000095be4cbb: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 248.603531] 0000000039dc0c64: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 248.603541] 00000000f6190c0b: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 248.603551] 00000000038d61b9: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 248.603561] 0000000089a0b211: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 248.603587] XFS (loop3): SB validate failed with error -117. 01:19:48 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x6, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:19:48 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:48 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:48 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:48 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) [ 249.150690] XFS (loop3): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 249.150726] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 249.150735] XFS (loop3): Unmount and run xfs_repair 01:19:49 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x7, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 249.150746] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 249.150762] 00000000e3738ca6: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 249.150773] 0000000058d2d059: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 249.150785] 0000000024f02c75: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 249.150796] 0000000004982497: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 249.150808] 0000000011c13007: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 249.150820] 00000000621e4cfa: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 249.150830] 000000001861c4e6: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 249.150843] 000000003d4bdb2c: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 249.150870] XFS (loop3): SB validate failed with error -117. 01:19:49 executing program 2: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:49 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000200)) 01:19:49 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x8, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:19:49 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000200)) 01:19:49 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000200)) 01:19:49 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:19:49 executing program 2: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) [ 249.626182] XFS (loop3): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. 01:19:49 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) [ 249.626213] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 249.626221] XFS (loop3): Unmount and run xfs_repair [ 249.626231] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 249.626244] 0000000085f55bc6: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 249.626256] 0000000023524b50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 249.626267] 00000000ea903d0b: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 249.626278] 0000000010bb7834: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 249.626289] 000000001b210d99: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 249.626300] 00000000d7e5a4cd: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 249.626311] 00000000280785d9: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 249.626322] 00000000ac5b14c5: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 249.626967] XFS (loop3): SB validate failed with error -117. [ 250.080838] XFS (loop3): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 250.080872] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 250.080881] XFS (loop3): Unmount and run xfs_repair [ 250.080892] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 250.080908] 0000000080036c58: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 250.080919] 00000000b133d7a6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 250.080931] 00000000593b3c41: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 250.080944] 00000000b22e9b39: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 250.080954] 0000000019685d09: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 250.080965] 00000000c1cee9d7: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 250.080976] 00000000c399e892: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 250.080987] 000000006723ace4: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 250.081013] XFS (loop3): SB validate failed with error -117. [ 250.254689] XFS (loop3): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 250.254719] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 250.254727] XFS (loop3): Unmount and run xfs_repair [ 250.254737] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 250.254750] 00000000012d9126: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 250.254761] 00000000d93540df: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 250.254772] 00000000f1cb76a1: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:19:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 250.254783] 000000002fe3ba46: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 250.254794] 0000000095177e67: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 250.254805] 0000000012790685: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 250.254816] 0000000030836108: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 250.254827] 00000000e52b1c3d: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 250.259200] XFS (loop3): SB validate failed with error -117. 01:19:50 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:50 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:50 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x9, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 250.760181] XFS (loop3): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 250.760211] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff 01:19:50 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:50 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0xf, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:19:50 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) [ 250.760218] XFS (loop3): Unmount and run xfs_repair [ 250.760226] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 250.760235] 000000003fad842d: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 250.760245] 0000000001340046: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 250.760285] 00000000d4d84e37: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 250.760296] 00000000dda64742: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 250.760316] 00000000d4a59bee: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 250.760358] 000000002fed3be9: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:19:50 executing program 2: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) [ 250.760369] 00000000db22c637: 00 00 06 c0 34 84 02 00 01 00 00 10 07 00 e5 ff ....4........... [ 250.760380] 0000000021c47ae5: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 250.760479] XFS (loop3): SB validate failed with error -117. [ 251.178850] XFS (loop3): Superblock earlier than Version 5 has XFS_[PQ]UOTA_{ENFD|CHKD} bits. [ 251.178915] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 251.178922] XFS (loop3): Unmount and run xfs_repair [ 251.178930] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 251.178942] 00000000b3c8b3f4: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 251.178953] 000000000ee7e064: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 251.178963] 00000000cdd75dad: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 251.178974] 00000000663b68bd: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 251.178984] 00000000d83abe7e: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 251.178994] 00000000d29e83e6: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 251.179004] 00000000fc1bdc6c: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 251.179015] 0000000041ff0ff9: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 251.179036] XFS (loop3): SB validate failed with error -117. 01:19:51 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x10, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:19:51 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:19:51 executing program 0: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:51 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') [ 251.668538] XFS (loop3): SB sanity check failed [ 251.668572] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 251.668581] XFS (loop3): Unmount and run xfs_repair [ 251.668592] XFS (loop3): First 128 bytes of corrupted metadata buffer: 01:19:51 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x14, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:19:51 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:19:51 executing program 0: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) [ 251.668606] 00000000924b5dec: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 251.668618] 00000000afc437c1: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 251.668630] 000000003a889685: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 251.668643] 000000008ab63f16: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 251.668655] 0000000080d33746: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 251.668667] 00000000324fd148: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 251.668678] 0000000044c8909d: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 251.668690] 0000000016c86aad: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 251.668714] XFS (loop3): SB validate failed with error -117. 01:19:51 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:51 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x2b, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:19:51 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x10, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 252.097015] XFS (loop3): SB sanity check failed [ 252.097048] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 252.097056] XFS (loop3): Unmount and run xfs_repair [ 252.097066] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 252.097079] 0000000033f0e0d9: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 252.097090] 00000000a1a5cd5e: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 252.097101] 0000000077e88b2f: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 252.097112] 00000000db87ffd2: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 252.097123] 000000004ae3c9dd: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 252.097134] 0000000002505ec9: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:52 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) [ 252.097145] 00000000f9217a5a: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 252.097156] 00000000a0cf0cd7: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 252.097212] XFS (loop3): SB validate failed with error -117. [ 252.289592] XFS (loop3): SB sanity check failed [ 252.289626] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 252.289635] XFS (loop3): Unmount and run xfs_repair [ 252.289646] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 252.289662] 00000000729ce408: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 252.289675] 000000004534e77b: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 252.289687] 0000000077d8d94f: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 252.289699] 00000000a3758ffa: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 252.289712] 0000000091e0a874: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 252.289725] 00000000e9e7d8ae: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 252.289737] 00000000c3b0eb94: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 252.289750] 000000008afdb974: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 252.289775] XFS (loop3): SB validate failed with error -117. [ 252.348056] XFS (loop2): SB sanity check failed 01:19:52 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x2d, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:19:52 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') [ 252.634360] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 252.634370] XFS (loop2): Unmount and run xfs_repair [ 252.634381] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 252.634397] 00000000820b5bee: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ 01:19:52 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x10, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 252.634410] 000000007710428b: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 252.634428] 00000000208fdea4: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 252.634916] 0000000076c043e4: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 252.634929] 00000000256f16ce: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 252.634941] 0000000056cc9acf: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 252.634953] 00000000e8986d9c: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... 01:19:52 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x30, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 252.634965] 00000000f3fbe93a: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 252.635000] XFS (loop2): SB validate failed with error -117. [ 252.680124] XFS (loop3): SB sanity check failed [ 252.680158] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 252.680166] XFS (loop3): Unmount and run xfs_repair [ 252.680177] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 252.680197] 0000000028987d2e: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 252.680209] 00000000015f10b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 252.680221] 0000000004bb5259: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 252.680233] 00000000c3a91eea: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 252.680245] 00000000b264270d: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 252.680257] 00000000c12173f1: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 252.680269] 00000000d7abd2f3: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 252.680281] 000000002adeaffb: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 252.680312] XFS (loop3): SB validate failed with error -117. [ 253.024594] XFS (loop2): SB sanity check failed [ 253.024626] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 253.024726] XFS (loop2): Unmount and run xfs_repair [ 253.024736] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 253.024749] 00000000a6352910: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 253.024760] 000000009ba2c5f3: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 253.024771] 00000000f5cec8af: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 253.024782] 00000000760ad4b2: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 253.024793] 00000000c8ccd63b: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 253.024804] 0000000089556026: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 253.024815] 00000000d1164be6: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 253.024827] 000000006b95c37c: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. 01:19:52 executing program 0: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) [ 253.024953] XFS (loop2): SB validate failed with error -117. 01:19:52 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x63, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 253.198096] XFS (loop3): SB sanity check failed [ 253.198164] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 253.198171] XFS (loop3): Unmount and run xfs_repair [ 253.198180] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 253.198196] 000000006cd82032: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 253.198246] 00000000254e82ea: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 253.198259] 00000000bec1ebc0: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 253.198283] 00000000e730a1cf: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 253.198294] 000000003ea4cfdd: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 253.198304] 00000000b43fc977: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 253.198315] 0000000067fa1bcb: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... 01:19:53 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) [ 253.198325] 00000000b086aee4: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 253.198347] XFS (loop3): SB validate failed with error -117. 01:19:53 executing program 2: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:53 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x8f, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:19:53 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:53 executing program 2: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) [ 253.499553] XFS (loop3): SB sanity check failed [ 253.499593] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 253.499602] XFS (loop3): Unmount and run xfs_repair [ 253.499612] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 253.499629] 000000004505eb2e: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 253.499642] 00000000fc8dab0a: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 253.499654] 00000000914dbe8e: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 253.499667] 000000007ab24fdc: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 253.499679] 00000000576e853f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 253.499691] 000000009f56b6a2: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 253.499703] 00000000c8c721eb: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 253.499716] 0000000008553cee: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 253.499743] XFS (loop3): SB validate failed with error -117. 01:19:53 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:19:53 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x98, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 253.747497] XFS (loop3): SB sanity check failed [ 253.747530] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 253.747537] XFS (loop3): Unmount and run xfs_repair [ 253.747553] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 253.747567] 00000000445e7d20: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 253.747578] 000000005ad25833: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 253.747588] 00000000e655050d: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 253.747597] 0000000026cf3d30: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 253.747605] 0000000010f4159b: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 253.747615] 000000007960dcd2: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:53 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') [ 253.747625] 000000006d61bdc9: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 253.747635] 000000008966a547: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 253.747688] XFS (loop3): SB validate failed with error -117. 01:19:53 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0xa5, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 253.966482] XFS (loop3): SB sanity check failed [ 253.966514] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 253.966522] XFS (loop3): Unmount and run xfs_repair [ 253.966540] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 253.966554] 00000000649a8ac9: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 253.966565] 0000000065affa76: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 253.966576] 000000009c7298c2: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 253.966588] 000000008a69cee5: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 253.966599] 00000000a0d1a3f6: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 253.966610] 00000000f600738e: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 253.966622] 000000008ec3eca2: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 253.966669] 000000008e487a0d: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 253.966720] XFS (loop3): SB validate failed with error -117. 01:19:54 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0xc5, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:19:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 254.243033] XFS (loop3): SB sanity check failed [ 254.243066] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 254.243073] XFS (loop3): Unmount and run xfs_repair [ 254.243083] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 254.243096] 00000000c7f8dde4: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 254.243108] 000000007b36073f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 254.243119] 00000000059dc4ce: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 254.243130] 0000000019552a4a: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 254.243142] 0000000011b8276c: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 254.243153] 00000000468e9538: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 254.243164] 00000000a5eadfc9: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 254.243176] 00000000855442fe: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 254.246488] XFS (loop3): SB validate failed with error -117. 01:19:54 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x300, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:19:54 executing program 2: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) [ 254.676986] XFS (loop3): SB sanity check failed [ 254.677023] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 254.677033] XFS (loop3): Unmount and run xfs_repair [ 254.677045] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 254.677060] 0000000096c822a2: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 254.677073] 000000001d0f7062: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 254.677085] 00000000f1a67049: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 254.677098] 0000000037b98240: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ 01:19:54 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) [ 254.677110] 00000000d207a628: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 254.677123] 00000000b9f8de3d: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 254.677136] 000000007459ef10: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 254.677148] 0000000042cdb2b7: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 254.677174] XFS (loop3): SB validate failed with error -117. [ 254.859046] XFS (loop3): SB sanity check failed 01:19:54 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) [ 254.870666] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 254.870676] XFS (loop3): Unmount and run xfs_repair [ 254.870688] XFS (loop3): First 128 bytes of corrupted metadata buffer: 01:19:54 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x371, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 254.870704] 00000000aedebd81: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 254.870717] 000000004692d7e1: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 254.870729] 0000000088e5f13e: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 254.870742] 0000000054f038c6: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 254.870754] 00000000127632b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 254.870766] 000000005757d003: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 254.870779] 0000000018a15ca5: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 254.870791] 0000000008a1144b: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 254.870826] XFS (loop3): SB validate failed with error -117. 01:19:54 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:19:54 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:55 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(0x0, 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:55 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x372, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:19:55 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(0x0, 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) [ 255.332715] XFS (loop3): SB sanity check failed [ 255.332747] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 255.332755] XFS (loop3): Unmount and run xfs_repair [ 255.332765] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 255.332779] 0000000005f38d8a: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 255.332790] 00000000166f8537: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 255.332802] 000000002058b892: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 255.332813] 0000000009e1bf40: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 255.332824] 00000000f1e36164: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ 01:19:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:55 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') [ 255.332835] 00000000020c891e: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 255.332846] 000000000a4244c3: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 255.332870] 000000007e3657d1: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 255.337176] XFS (loop3): SB validate failed with error -117. [ 255.630849] XFS (loop3): SB sanity check failed [ 255.630882] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 255.630890] XFS (loop3): Unmount and run xfs_repair [ 255.630901] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 255.630914] 00000000c06519a5: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 255.630924] 00000000444624b5: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 255.630934] 0000000086ada650: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 255.630943] 00000000b6236f30: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 255.630952] 0000000072c3a836: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ 01:19:55 executing program 2: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:55 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:55 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x38b, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 255.630961] 0000000025621f04: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 255.630971] 0000000010570155: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 255.630980] 000000001dac2341: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 255.631036] XFS (loop3): SB validate failed with error -117. 01:19:55 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:19:56 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x38d, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 256.110779] XFS (loop3): SB sanity check failed 01:19:56 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:19:56 executing program 2: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:56 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') [ 256.110814] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 256.110823] XFS (loop3): Unmount and run xfs_repair [ 256.110834] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 256.110848] 00000000b17c933d: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 256.110860] 00000000f82440d4: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 256.110872] 000000007ab050ff: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 256.110883] 00000000937eb45c: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 256.110895] 00000000f5b91aa8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 256.110907] 00000000b820e1d7: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 256.110919] 000000007ae2e8a6: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 256.110930] 00000000f3d53654: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 256.110956] XFS (loop3): SB validate failed with error -117. [ 256.525039] XFS (loop3): SB sanity check failed 01:19:56 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:56 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(0x0, 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) [ 256.525078] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 256.525087] XFS (loop3): Unmount and run xfs_repair [ 256.525097] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 256.525111] 0000000057bc0b47: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 256.525122] 000000007f46c0b8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 256.525133] 00000000c822e919: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 256.525143] 000000005bb4813c: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 256.525153] 000000003393202e: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 256.525163] 00000000cfba1f00: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 256.525174] 00000000472c2223: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 256.525184] 00000000ff739413: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 256.525239] XFS (loop3): SB validate failed with error -117. 01:19:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:56 executing program 4: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:19:56 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x3a4, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:19:56 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x0, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:56 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:56 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:19:56 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:56 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x0, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:56 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x3ae, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 257.188830] XFS (loop3): SB sanity check failed [ 257.188863] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 257.188871] XFS (loop3): Unmount and run xfs_repair [ 257.188880] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 257.188892] 00000000b5e276f3: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 257.188903] 000000009ca5ac62: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 257.188914] 000000008ec46761: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 257.188924] 000000005d1f35fc: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 257.188935] 000000005e1664a4: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 257.188945] 00000000658df696: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 257.188955] 000000006df33a5a: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 257.188971] 000000003f21a98e: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 257.189050] XFS (loop3): SB validate failed with error -117. 01:19:57 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x3af, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:19:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 257.479052] XFS (loop3): SB sanity check failed [ 257.479075] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 257.479080] XFS (loop3): Unmount and run xfs_repair 01:19:57 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x3b7, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 257.479086] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 257.479095] 00000000ab150da3: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 257.479101] 000000001399312a: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 257.479107] 00000000491ed2a3: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 257.479113] 00000000e7d52f47: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 257.479119] 000000003ebfe925: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 257.479125] 000000000e17c04f: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 257.479131] 00000000f7cd3968: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 257.479137] 00000000aba425f5: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 257.479191] XFS (loop3): SB validate failed with error -117. 01:19:57 executing program 4: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:19:57 executing program 2: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) [ 258.122808] XFS (loop3): SB sanity check failed [ 258.122839] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 258.122847] XFS (loop3): Unmount and run xfs_repair [ 258.122855] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 258.122868] 000000005d7f5230: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ 01:19:58 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0xa00, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 258.122880] 00000000a24f1fcd: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 258.122890] 000000007c8b594c: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 258.122901] 00000000d05dd424: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 258.122911] 00000000778454f9: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 258.122921] 000000005003630a: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 258.122932] 000000003b29b2cf: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 258.122942] 000000004ae6cecd: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 258.122963] XFS (loop3): SB validate failed with error -117. 01:19:58 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') [ 258.471309] XFS (loop3): SB sanity check failed [ 258.471340] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 258.471348] XFS (loop3): Unmount and run xfs_repair [ 258.471357] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 258.471370] 00000000624136a8: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 258.471380] 000000008b1d2ee1: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 258.471391] 0000000051248443: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 258.471402] 00000000af38c19f: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 258.471412] 00000000c5414c3f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 258.471422] 000000009ae57ae3: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:58 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x4b00, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 258.471433] 000000001f91c0b0: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 258.471443] 0000000030e311af: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 258.471464] XFS (loop3): SB validate failed with error -117. 01:19:58 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x0, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:19:58 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:58 executing program 4: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) [ 259.126916] XFS (loop3): SB sanity check failed [ 259.126945] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 259.126951] XFS (loop3): Unmount and run xfs_repair [ 259.126960] XFS (loop3): First 128 bytes of corrupted metadata buffer: 01:19:58 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:58 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:19:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) [ 259.126972] 000000000188d6bf: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 259.126981] 000000008e4132ba: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 259.126990] 00000000fef3f6cf: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 259.127005] 0000000040fb64ae: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ 01:19:59 executing program 2: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:19:59 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x7000, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 259.127014] 000000005c1f97a3: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 259.127023] 00000000eb57eaa0: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 259.127033] 0000000063436e03: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 259.127042] 000000005b0583c8: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 259.127096] XFS (loop3): SB validate failed with error -117. 01:19:59 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:19:59 executing program 2: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:19:59 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') [ 259.839093] XFS (loop3): SB sanity check failed [ 259.839128] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 259.839136] XFS (loop3): Unmount and run xfs_repair [ 259.839147] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 259.839163] 000000002081dd6a: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 259.839175] 0000000004cf435c: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:59 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x7900, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 259.839188] 00000000eb6ffe0b: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 259.839200] 00000000a1b4c66e: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 259.839212] 0000000053694f3b: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 259.839223] 00000000e76b404a: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 259.839235] 000000001f09e3ec: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 259.839247] 00000000c7707c16: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. 01:19:59 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:19:59 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') [ 259.839271] XFS (loop3): SB validate failed with error -117. 01:20:00 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:20:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:20:00 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:20:00 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(0x0, 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:20:00 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000200)) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r1, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:20:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:20:00 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x7a00, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 260.796197] XFS (loop3): SB sanity check failed [ 260.796231] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 260.796244] XFS (loop3): Unmount and run xfs_repair [ 260.796297] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 260.796311] 00000000fd2c8330: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 260.796324] 00000000de4dae95: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 260.796336] 0000000039e11b59: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 260.796348] 00000000a9a53763: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 260.796363] 000000000b5418c7: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 260.796405] 00000000104935d3: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:20:00 executing program 2: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:20:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:20:00 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000200)) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r1, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:20:00 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:20:00 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(0x0, 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') [ 260.796417] 00000000aef61c05: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 260.796433] 00000000ae1f652c: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 260.796500] XFS (loop3): SB validate failed with error -117. 01:20:01 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:20:01 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x7b00, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 261.452816] XFS (loop3): SB sanity check failed [ 261.452854] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 261.452862] XFS (loop3): Unmount and run xfs_repair [ 261.452872] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 261.452886] 00000000e88d8594: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ 01:20:01 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:20:01 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000200)) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r1, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) [ 261.452897] 00000000b5a21e4b: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 261.452909] 00000000426c7573: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 261.452920] 00000000e36a562b: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ 01:20:01 executing program 2: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) 01:20:01 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(0x0, 0x18, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') [ 261.452931] 000000002f20e97c: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 261.452942] 0000000064706261: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:20:01 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) [ 261.452954] 00000000e4875a44: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 261.452965] 0000000029870d87: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 261.453014] XFS (loop3): SB validate failed with error -117. 01:20:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:20:01 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:20:02 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x7c00, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:20:02 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) [ 262.285605] XFS (loop3): SB sanity check failed [ 262.285640] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 262.285649] XFS (loop3): Unmount and run xfs_repair [ 262.285661] XFS (loop3): First 128 bytes of corrupted metadata buffer: 01:20:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 01:20:02 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) [ 262.285678] 00000000cb8e0909: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 262.285690] 00000000cc096a66: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 262.285703] 00000000e070dd60: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 262.285715] 000000003c6d402b: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 262.285728] 000000001b5d7e13: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 262.285740] 0000000027d5b5bb: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 262.285753] 000000009b81560e: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... 01:20:02 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:20:02 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(0x0, 0x0, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') [ 262.285766] 000000005e5cb407: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 262.285799] XFS (loop3): SB validate failed with error -117. 01:20:02 executing program 5: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x30, r2, 0x23f, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) 01:20:02 executing program 2: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) 01:20:02 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) syz_open_dev$audion(0x0, 0x0, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 01:20:03 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x18, 0x2000) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x280, 0x0, 0x360, 0x0, 0x2, 0x4, 0x0, {}, {0x4}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x3}) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) 01:20:03 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x7d00, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:20:03 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x7e00, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:20:04 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x7f00, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) 01:20:05 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xfffdffffffffffc1, 0x8100, &(0x7f0000000380)=[{&(0x7f0000000440)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034840200010000100700e5ff00000000000000000c0908040cd357f42c99a737f798d27f722664f47eb92cee062564bace90ba453d909b2e11eed749fe26f5eb82ea3ee3391be1f68281e51f2d4af7390292e37d7f317d2ca8c26fbe95acf108f58a2c2a402c79a8a7737bbaae9d8b190c08c5b4607b9d4853d1ff438d", 0xe1}], 0x0, 0x0) pipe(0x0) [ 264.129819] XFS (loop3): SB sanity check failed [ 264.129886] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 264.129894] XFS (loop3): Unmount and run xfs_repair [ 264.129904] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 264.129918] 00000000aadf1914: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 264.129930] 00000000e129c102: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 264.129941] 00000000b3f2dfb0: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 264.129953] 00000000102653bd: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 264.129964] 0000000076963b93: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 264.129975] 000000000b96ad20: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 264.129987] 00000000532bfa82: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 264.129998] 000000005a8757a2: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 264.130047] XFS (loop3): SB validate failed with error -117. [ 264.678720] XFS (loop3): SB sanity check failed [ 264.678744] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 264.678748] XFS (loop3): Unmount and run xfs_repair [ 264.678754] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 264.678762] 00000000ffd13d0f: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 264.678769] 000000009e5f2b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 264.678775] 000000003e0a4905: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 264.678780] 0000000073a82656: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 264.678786] 00000000fa84d1e8: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 264.678792] 00000000a61d5c20: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 264.678798] 000000001441cda2: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 264.678804] 0000000009f02e3f: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 264.678863] XFS (loop3): SB validate failed with error -117. [ 265.327347] XFS (loop3): SB sanity check failed [ 265.327378] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 265.327386] XFS (loop3): Unmount and run xfs_repair [ 265.327396] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 265.327410] 000000001ac9a5f0: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 265.327420] 00000000e847af44: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 265.327431] 000000008721fdd8: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 265.327441] 00000000d9466b7b: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 265.327452] 00000000619fc9e7: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 265.327463] 000000002bb4a4d7: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 265.327474] 000000009faf9da9: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 265.327484] 0000000094a2e029: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 265.327540] XFS (loop3): SB validate failed with error -117. [ 265.901314] XFS (loop3): SB sanity check failed [ 265.901350] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff [ 265.901359] XFS (loop3): Unmount and run xfs_repair [ 265.901370] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 265.901385] 0000000024505aa6: 58 46 53 42 00 00 10 00 00 00 10 08 00 00 00 00 XFSB............ [ 265.901398] 000000004f66b96d: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 265.901410] 0000000050223816: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 265.901423] 00000000468b40f8: 02 00 00 00 00 00 00 00 00 00 10 08 00 00 00 00 ................ [ 265.901435] 00000000db1dca54: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ................ [ 265.901447] 000000006f7b677e: 00 00 10 08 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 265.901459] 000000002212fdc6: 00 00 06 c0 34 84 02 00 00 00 10 08 00 00 00 00 ....4........... [ 265.901471] 000000007310c884: 00 00 00 00 00 00 00 00 0c 09 08 04 0c d3 57 f4 ..............W. [ 265.901496] XFS (loop3): SB validate failed with error -117. [ 307.226027] NOHZ: local_softirq_pending 08 [ 327.704024] NOHZ: local_softirq_pending 08 [ 369.302000] NOHZ: local_softirq_pending 08 [ 412.817847] INFO: task syz-executor.0:11273 blocked for more than 140 seconds. [ 412.817859] Not tainted 4.19.120-syzkaller #0 [ 412.817863] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.817869] syz-executor.0 D28416 11273 6447 0x00000004 [ 412.817888] Call Trace: [ 412.817956] ? __schedule+0x866/0x1d80 [ 412.817972] ? __mutex_lock+0x721/0x1300 [ 412.817988] ? firmware_map_remove+0x19a/0x19a [ 412.818001] ? lock_downgrade+0x740/0x740 [ 412.818020] schedule+0x8d/0x1b0 [ 412.818033] schedule_preempt_disabled+0xf/0x20 [ 412.818045] __mutex_lock+0x726/0x1300 [ 412.818105] ? fb_release+0x4e/0x140 [ 412.818122] ? mutex_trylock+0x1a0/0x1a0 [ 412.818135] ? vfs_lock_file+0xe0/0xe0 [ 412.818148] ? mark_held_locks+0xf0/0xf0 [ 412.818159] ? fsnotify+0x8ba/0xf00 [ 412.818176] ? fsnotify_first_mark+0x200/0x200 [ 412.818188] ? locks_remove_file+0x2d3/0x450 [ 412.818205] ? unregister_framebuffer+0x40/0x40 [ 412.818216] ? fb_release+0x4e/0x140 [ 412.818227] fb_release+0x4e/0x140 [ 412.818241] ? unregister_framebuffer+0x40/0x40 [ 412.818255] __fput+0x2cd/0x890 [ 412.818275] task_work_run+0x13f/0x1b0 [ 412.818296] exit_to_usermode_loop+0x25a/0x2b0 [ 412.818314] do_syscall_64+0x538/0x620 [ 412.818333] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 412.818345] RIP: 0033:0x416421 [ 412.818359] Code: 89 4c 24 20 48 8b 58 10 48 89 1c 24 48 89 4c 24 08 48 8b 1a ff d3 48 8b 44 24 40 48 8b 4c 24 20 eb ad 48 8b 48 38 48 89 4c 24 <10> 48 c7 04 24 00 40 00 00 48 c7 44 24 08 00 00 00 00 e8 f8 a7 ff [ 412.818367] RSP: 002b:00007ffcf03a7ae0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 412.818380] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000416421 [ 412.818389] RDX: 0000000000000000 RSI: 000000000000181a RDI: 0000000000000005 [ 412.818397] RBP: 0000000000000001 R08: 00000000fd9b1819 R09: 00000000fd9b181d [ 412.818406] R10: 00007ffcf03a7bd0 R11: 0000000000000293 R12: 000000000078c900 [ 412.818415] R13: 000000000078c900 R14: ffffffffffffffff R15: 000000000078bfac [ 412.818441] INFO: task syz-executor.2:11297 blocked for more than 140 seconds. [ 412.818449] Not tainted 4.19.120-syzkaller #0 [ 412.818454] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.818460] syz-executor.2 D28416 11297 6650 0x00000004 [ 412.818480] Call Trace: [ 412.818500] ? __schedule+0x866/0x1d80 [ 412.818516] ? __mutex_lock+0x721/0x1300 [ 412.818536] ? firmware_map_remove+0x19a/0x19a [ 412.818550] ? lock_downgrade+0x740/0x740 [ 412.818573] schedule+0x8d/0x1b0 [ 412.818589] schedule_preempt_disabled+0xf/0x20 [ 412.818604] __mutex_lock+0x726/0x1300 [ 412.818619] ? fb_release+0x4e/0x140 [ 412.818640] ? mutex_trylock+0x1a0/0x1a0 [ 412.818654] ? vfs_lock_file+0xe0/0xe0 [ 412.818669] ? mark_held_locks+0xf0/0xf0 [ 412.818681] ? fsnotify+0x8ba/0xf00 [ 412.818702] ? fsnotify_first_mark+0x200/0x200 [ 412.818716] ? locks_remove_file+0x2d3/0x450 [ 412.818735] ? unregister_framebuffer+0x40/0x40 [ 412.818748] ? fb_release+0x4e/0x140 [ 412.818760] fb_release+0x4e/0x140 [ 412.818776] ? unregister_framebuffer+0x40/0x40 [ 412.818796] __fput+0x2cd/0x890 [ 412.818816] task_work_run+0x13f/0x1b0 [ 412.818837] exit_to_usermode_loop+0x25a/0x2b0 [ 412.818855] do_syscall_64+0x538/0x620 [ 412.818873] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 412.818882] RIP: 0033:0x416421 [ 412.818895] Code: 89 4c 24 20 48 8b 58 10 48 89 1c 24 48 89 4c 24 08 48 8b 1a ff d3 48 8b 44 24 40 48 8b 4c 24 20 eb ad 48 8b 48 38 48 89 4c 24 <10> 48 c7 04 24 00 40 00 00 48 c7 44 24 08 00 00 00 00 e8 f8 a7 ff [ 412.818902] RSP: 002b:00007ffebcf1d120 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 412.818914] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000416421 [ 412.818922] RDX: 0000000000000000 RSI: 0000000000001d7e RDI: 0000000000000004 [ 412.818931] RBP: 0000000000000001 R08: 000000004ee2bd7e R09: 000000004ee2bd82 [ 412.818939] R10: 00007ffebcf1d210 R11: 0000000000000293 R12: 000000000078c900 [ 412.818948] R13: 000000000078c900 R14: ffffffffffffffff R15: 000000000078bfac [ 412.818972] INFO: task syz-executor.1:11301 blocked for more than 140 seconds. [ 412.818979] Not tainted 4.19.120-syzkaller #0 [ 412.818984] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.818989] syz-executor.1 D28160 11301 6567 0x00000004 [ 412.819010] Call Trace: [ 412.819029] ? __schedule+0x866/0x1d80 [ 412.819045] ? __mutex_lock+0x721/0x1300 [ 412.819066] ? firmware_map_remove+0x19a/0x19a [ 412.819080] ? lock_downgrade+0x740/0x740 [ 412.819102] schedule+0x8d/0x1b0 [ 412.819119] schedule_preempt_disabled+0xf/0x20 [ 412.819134] __mutex_lock+0x726/0x1300 [ 412.819149] ? fb_open+0xd3/0x430 [ 412.819169] ? mutex_trylock+0x1a0/0x1a0 [ 412.819184] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 412.819204] ? __mutex_unlock_slowpath+0xea/0x670 [ 412.819223] ? retint_kernel+0x2d/0x2d [ 412.819237] ? get_fb_info.part.0+0x80/0x80 [ 412.819255] ? fb_open+0xd3/0x430 [ 412.819267] fb_open+0xd3/0x430 [ 412.819283] ? get_fb_info.part.0+0x80/0x80 [ 412.819294] chrdev_open+0x219/0x5c0 [ 412.819309] ? cdev_put.part.0+0x50/0x50 [ 412.819322] ? cdev_put.part.0+0x50/0x50 [ 412.819341] do_dentry_open+0x4a8/0x1160 [ 412.819356] ? cdev_put.part.0+0x50/0x50 [ 412.819372] ? chown_common+0x550/0x550 [ 412.819384] ? vfs_open+0x12/0xd0 [ 412.819398] ? __sanitizer_cov_trace_pc+0x4/0x50 [ 412.819419] path_openat+0x1031/0x4200 [ 412.819450] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 412.819466] ? mark_held_locks+0xa6/0xf0 [ 412.819485] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 412.819503] do_filp_open+0x1a1/0x280 [ 412.819517] ? may_open_dev+0xf0/0xf0 [ 412.819530] ? find_held_lock+0x2d/0x110 [ 412.819553] ? lock_downgrade+0x740/0x740 [ 412.819568] ? __lock_is_held+0xad/0x140 [ 412.819585] ? do_raw_spin_unlock+0x171/0x260 [ 412.819600] ? _raw_spin_unlock+0x29/0x40 [ 412.819613] ? __alloc_fd+0x43c/0x550 [ 412.819634] do_sys_open+0x3c0/0x500 [ 412.819650] ? filp_open+0x70/0x70 [ 412.819667] ? __ia32_sys_clock_settime+0x260/0x260 [ 412.819682] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 412.819696] ? trace_hardirqs_off_caller+0x55/0x210 [ 412.819712] ? do_syscall_64+0x21/0x620 [ 412.819731] do_syscall_64+0xf9/0x620 [ 412.819749] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 412.819758] RIP: 0033:0x45c829 [ 412.819771] Code: 08 48 c7 44 24 10 09 00 00 00 e8 02 a1 fa ff 48 8b 44 24 18 48 8b 4c 24 30 48 83 c1 10 48 89 0c 24 48 89 44 24 08 48 c7 44 24 <10> 58 1f 00 00 e8 dd a0 fa ff 48 8b 44 24 18 48 89 44 24 40 48 8b [ 412.819779] RSP: 002b:00007f092902dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 412.819796] RAX: ffffffffffffffda RBX: 00000000004f73c0 RCX: 000000000045c829 [ 412.819804] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 412.819812] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 412.819820] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 412.819829] R13: 00000000000007a0 R14: 00000000004ca544 R15: 00007f092902e6d4 [ 412.819853] INFO: task syz-executor.4:11316 blocked for more than 140 seconds. [ 412.819860] Not tainted 4.19.120-syzkaller #0 [ 412.819865] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.819871] syz-executor.4 D28528 11316 6787 0x00000004 [ 412.819891] Call Trace: [ 412.819910] ? __schedule+0x866/0x1d80 [ 412.819931] ? __mutex_lock+0x721/0x1300 [ 412.819952] ? firmware_map_remove+0x19a/0x19a [ 412.819966] ? lock_downgrade+0x740/0x740 [ 412.819989] schedule+0x8d/0x1b0 [ 412.820005] schedule_preempt_disabled+0xf/0x20 [ 412.820020] __mutex_lock+0x726/0x1300 [ 412.820035] ? fb_open+0xd3/0x430 [ 412.820055] ? mutex_trylock+0x1a0/0x1a0 [ 412.820076] ? __mutex_unlock_slowpath+0xea/0x670 [ 412.820089] ? find_held_lock+0x2d/0x110 [ 412.820116] ? fb_open+0xd3/0x430 [ 412.820128] fb_open+0xd3/0x430 [ 412.820143] ? get_fb_info.part.0+0x80/0x80 [ 412.820155] chrdev_open+0x219/0x5c0 [ 412.820170] ? cdev_put.part.0+0x50/0x50 [ 412.820190] ? security_file_open+0x162/0x1a0 [ 412.820206] do_dentry_open+0x4a8/0x1160 [ 412.820221] ? cdev_put.part.0+0x50/0x50 [ 412.820237] ? security_inode_permission+0xc4/0xf0 [ 412.820250] ? chown_common+0x550/0x550 [ 412.820265] ? inode_permission+0xaf/0x550 [ 412.820288] path_openat+0x1031/0x4200 [ 412.820311] ? mark_held_locks+0xf0/0xf0 [ 412.820327] ? __isolate_free_page+0x4c0/0x4c0 [ 412.820346] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 412.820372] do_filp_open+0x1a1/0x280 [ 412.820386] ? may_open_dev+0xf0/0xf0 [ 412.820400] ? find_held_lock+0x2d/0x110 [ 412.820422] ? lock_downgrade+0x740/0x740 [ 412.820437] ? __lock_is_held+0xad/0x140 [ 412.820454] ? do_raw_spin_unlock+0x171/0x260 [ 412.820468] ? _raw_spin_unlock+0x29/0x40 [ 412.820482] ? __alloc_fd+0x43c/0x550 [ 412.820503] do_sys_open+0x3c0/0x500 [ 412.820518] ? filp_open+0x70/0x70 [ 412.820534] ? __ia32_sys_clock_settime+0x260/0x260 [ 412.820550] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 412.820563] ? trace_hardirqs_off_caller+0x55/0x210 [ 412.820579] ? do_syscall_64+0x21/0x620 [ 412.820598] do_syscall_64+0xf9/0x620 [ 412.820615] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 412.820624] RIP: 0033:0x45c829 [ 412.820637] Code: 08 48 c7 44 24 10 09 00 00 00 e8 02 a1 fa ff 48 8b 44 24 18 48 8b 4c 24 30 48 83 c1 10 48 89 0c 24 48 89 44 24 08 48 c7 44 24 <10> 58 1f 00 00 e8 dd a0 fa ff 48 8b 44 24 18 48 89 44 24 40 48 8b [ 412.820644] RSP: 002b:00007f432e5d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 412.820657] RAX: ffffffffffffffda RBX: 00000000004f73c0 RCX: 000000000045c829 [ 412.820665] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 412.820673] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 412.820682] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 412.820690] R13: 00000000000007a0 R14: 00000000004ca544 R15: 00007f432e5d46d4 [ 412.820710] [ 412.820710] Showing all locks held in the system: [ 412.820724] 1 lock held by khungtaskd/1078: [ 412.820728] #0: 00000000dbcfd90b (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 [ 412.820794] 1 lock held by in:imklog/6128: [ 412.820798] #0: 000000003724320f (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xe3/0x100 [ 412.820834] 1 lock held by syz-executor.0/11273: [ 412.820838] #0: 000000006e49769c (&fb_info->lock){+.+.}, at: fb_release+0x4e/0x140 [ 412.820866] 3 locks held by syz-executor.5/11294: [ 412.820874] 1 lock held by syz-executor.2/11297: [ 412.820878] #0: 000000006e49769c (&fb_info->lock){+.+.}, at: fb_release+0x4e/0x140 [ 412.820905] 1 lock held by syz-executor.1/11301: [ 412.820909] #0: 000000006e49769c (&fb_info->lock){+.+.}, at: fb_open+0xd3/0x430 [ 412.820937] 1 lock held by syz-executor.4/11316: [ 412.820941] #0: 000000006e49769c (&fb_info->lock){+.+.}, at: fb_open+0xd3/0x430 [ 412.820964] [ 412.820969] ============================================= [ 412.820969] [ 412.820975] NMI backtrace for cpu 0 [ 412.820989] CPU: 0 PID: 1078 Comm: khungtaskd Not tainted 4.19.120-syzkaller #0 [ 412.820997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.821001] Call Trace: [ 412.821017] dump_stack+0x188/0x20d [ 412.821034] nmi_cpu_backtrace.cold+0x63/0xa2 [ 412.821051] ? lapic_can_unplug_cpu.cold+0x44/0x44 [ 412.821065] nmi_trigger_cpumask_backtrace+0x1a6/0x1eb [ 412.821079] watchdog+0x962/0xe40 [ 412.821099] ? reset_hung_task_detector+0x30/0x30 [ 412.821114] kthread+0x34a/0x420 [ 412.821129] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 412.821145] ret_from_fork+0x24/0x30 [ 412.821167] Sending NMI from CPU 0 to CPUs 1: [ 412.821855] NMI backtrace for cpu 1 [ 412.821862] CPU: 1 PID: 11294 Comm: syz-executor.5 Not tainted 4.19.120-syzkaller #0 [ 412.821867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.821871] RIP: 0010:bitfill_aligned+0x5a/0x200 [ 412.821882] Code: 72 e8 8a 42 f0 fd 49 c7 c6 ff ff ff ff 31 d2 89 ee 43 8d 3c 3c 4c 89 f0 44 89 f9 48 d3 e0 89 7c 24 0c 48 89 04 24 89 f8 f7 f5 <89> d1 49 d3 e6 e8 4c 43 f0 fd 8b 7c 24 0c 49 f7 d6 39 ef 77 47 e8 [ 412.821885] RSP: 0018:ffff888047a57208 EFLAGS: 00000246 [ 412.821892] RAX: 0000000000000028 RBX: 0000000000000000 RCX: 0000000000000000 [ 412.821897] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000a00 [ 412.821902] RBP: 0000000000000040 R08: ffff888048a46600 R09: 0000000000000040 [ 412.821907] R10: ffffed1014aae07b R11: ffff8880a55703df R12: 0000000000000a00 [ 412.821912] R13: ffff8880000a0000 R14: ffffffffffffffff R15: 0000000000000000 [ 412.821917] FS: 00007fe930912700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 412.821921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.821926] CR2: 000000c431971340 CR3: 000000008c32a000 CR4: 00000000001406e0 [ 412.821931] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 412.821936] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 412.821938] Call Trace: [ 412.821941] cfb_fillrect+0x418/0x7a0 [ 412.821944] ? cfb_fillrect+0x7a0/0x7a0 [ 412.821948] vga16fb_fillrect+0x68f/0x1960 [ 412.821951] bit_clear_margins+0x2d5/0x4a0 [ 412.821954] ? bit_bmove+0x210/0x210 [ 412.821958] ? vesafb_probe.cold+0x1082/0x1082 [ 412.821961] fbcon_clear_margins+0x2d8/0x370 [ 412.821964] fbcon_switch+0xe0f/0x1970 [ 412.821968] ? fbcon_set_def_font+0x370/0x370 [ 412.821971] ? set_origin+0x69/0x430 [ 412.821974] ? set_origin+0x2c4/0x430 [ 412.821977] ? fbcon_set_origin+0x26/0x50 [ 412.821980] redraw_screen+0x37d/0x870 [ 412.821984] ? vesafb_probe.cold+0x1082/0x1082 [ 412.821987] ? con_flush_chars+0x90/0x90 [ 412.821991] ? fbcon_set_palette+0x4c6/0x5e0 [ 412.821994] fbcon_modechanged+0x5eb/0x8f0 [ 412.821997] fbcon_event_notify+0x1b2/0x1d54 [ 412.822001] ? lock_acquire+0x1ec/0x400 [ 412.822004] notifier_call_chain+0xc0/0x230 [ 412.822008] blocking_notifier_call_chain+0x85/0xa0 [ 412.822011] fb_set_var+0xc39/0xe00 [ 412.822014] ? fb_set_suspend+0x130/0x130 [ 412.822017] ? lock_acquire+0x1ec/0x400 [ 412.822020] ? __mutex_lock+0x3cd/0x1300 [ 412.822024] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 412.822027] ? mutex_trylock+0x1a0/0x1a0 [ 412.822030] do_fb_ioctl+0x450/0x9c0 [ 412.822033] ? lock_downgrade+0x740/0x740 [ 412.822036] ? fb_read+0x570/0x570 [ 412.822040] ? avc_has_extended_perms+0x9c6/0x1030 [ 412.822043] ? avc_ss_reset+0x180/0x180 [ 412.822046] fb_ioctl+0xdd/0x130 [ 412.822049] ? do_fb_ioctl+0x9c0/0x9c0 [ 412.822052] do_vfs_ioctl+0xcda/0x12e0 [ 412.822056] ? selinux_file_ioctl+0x46c/0x5d0 [ 412.822059] ? selinux_file_ioctl+0x125/0x5d0 [ 412.822063] ? check_preemption_disabled+0x41/0x280 [ 412.822066] ? ioctl_preallocate+0x200/0x200 [ 412.822070] ? selinux_file_mprotect+0x600/0x600 [ 412.822073] ? __fget+0x340/0x510 [ 412.822076] ? iterate_fd+0x350/0x350 [ 412.822079] ? security_file_ioctl+0x6c/0xb0 [ 412.822082] ksys_ioctl+0x9b/0xc0 [ 412.822085] __x64_sys_ioctl+0x6f/0xb0 [ 412.822089] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 412.822092] do_syscall_64+0xf9/0x620 [ 412.822096] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 412.822098] RIP: 0033:0x45c829 [ 412.822109] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 412.822113] RSP: 002b:00007fe930911c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.822121] RAX: ffffffffffffffda RBX: 00000000004e4840 RCX: 000000000045c829 [ 412.822126] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000004 [ 412.822131] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 412.822136] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 412.822141] R13: 00000000000002f2 R14: 00000000004c54c8 R15: 00007fe9309126d4 [ 412.822186] Kernel panic - not syncing: hung_task: blocked tasks [ 412.822197] CPU: 0 PID: 1078 Comm: khungtaskd Not tainted 4.19.120-syzkaller #0 [ 412.822204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.822207] Call Trace: [ 412.822220] dump_stack+0x188/0x20d [ 412.822239] panic+0x26a/0x50e [ 412.822254] ? __warn_printk+0xf3/0xf3 [ 412.822268] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 412.822282] ? cpumask_next+0x3c/0x40 [ 412.822303] ? printk_safe_flush+0xd9/0x120 [ 412.822315] ? watchdog+0x962/0xe40 [ 412.822329] ? nmi_trigger_cpumask_backtrace+0x15e/0x1eb [ 412.822342] watchdog+0x973/0xe40 [ 412.822362] ? reset_hung_task_detector+0x30/0x30 [ 412.822376] kthread+0x34a/0x420 [ 412.822391] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 412.822404] ret_from_fork+0x24/0x30 [ 412.824000] Kernel Offset: disabled [ 414.825254] Rebooting in 86400 seconds..