00:52:04 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 654.063322][ T324] XFS (loop5): Invalid superblock magic number 00:52:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x4020940d, &(0x7f0000000040)={0x13}) 00:52:05 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x9d2}, &(0x7f00000000c0)=0x8) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x101}, &(0x7f0000000180)=0x8) r4 = fcntl$dupfd(r1, 0x406, r1) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r0, r4}) 00:52:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200080000000013, &(0x7f0000000200)=0x400100000001, 0x298) connect$inet6(r0, &(0x7f0000000080), 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2000002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, 0x0, &(0x7f0000000100)=0x3b4) 00:52:05 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200014, 0x0, 0x0, 0x0) 00:52:05 executing program 0: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000022c0), 0x1000) 00:52:05 executing program 0 (fault-call:4 fault-nth:0): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80045432, &(0x7f0000000040)={0x13}) 00:52:05 executing program 2: r0 = timerfd_create(0x5, 0x800) fcntl$getown(r0, 0x9) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x600, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) getsockname$tipc(r1, &(0x7f0000000040)=@name, &(0x7f00000000c0)=0x10) unshare(0x8000400) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) [ 654.759217][ T352] XFS (loop5): Invalid superblock magic number [ 654.778643][ T453] FAULT_INJECTION: forcing a failure. [ 654.778643][ T453] name failslab, interval 1, probability 0, space 0, times 0 [ 654.823959][ T453] CPU: 1 PID: 453 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 654.832521][ T453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.842594][ T453] Call Trace: [ 654.845908][ T453] dump_stack+0x172/0x1f0 [ 654.850276][ T453] should_fail.cold+0xa/0x15 [ 654.854900][ T453] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 654.860734][ T453] ? ___might_sleep+0x163/0x280 [ 654.865613][ T453] __should_failslab+0x121/0x190 [ 654.870588][ T453] should_failslab+0x9/0x14 [ 654.875106][ T453] __kmalloc_track_caller+0x2d8/0x740 [ 654.880511][ T453] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 654.886766][ T453] ? fput_many+0x12c/0x1a0 [ 654.891192][ T453] ? strndup_user+0x77/0xd0 [ 654.895716][ T453] memdup_user+0x26/0xb0 [ 654.899990][ T453] strndup_user+0x77/0xd0 [ 654.904331][ T453] ksys_mount+0x3c/0x150 [ 654.908587][ T453] __x64_sys_mount+0xbe/0x150 [ 654.913287][ T453] do_syscall_64+0x103/0x610 [ 654.917890][ T453] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 654.923796][ T453] RIP: 0033:0x458079 [ 654.927706][ T453] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 654.947326][ T453] RSP: 002b:00007fcbd7c88c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 654.955780][ T453] RAX: ffffffffffffffda RBX: 00007fcbd7c88c90 RCX: 0000000000458079 [ 654.963775][ T453] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 00:52:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80045440, &(0x7f0000000040)={0x13}) [ 654.971759][ T453] RBP: 000000000073bf00 R08: 0000000020000280 R09: 0000000000000000 [ 654.979737][ T453] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbd7c896d4 [ 654.987722][ T453] R13: 00000000004c3d9d R14: 00000000004d6fb8 R15: 0000000000000005 00:52:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000018912, &(0x7f0000000140)="2606e0cb3c123f3188b070d7e1d2e1bb46d6f0d261162761359f4a0df143a3e05a11f207aa6bc0906b7643172c40f1c86a3f61fca080d0efa27df5c9bfd172486e1632f38cd8b504f2f720dc0c82bd9821f91a59fa5c69d602e4cd9aa1208d2d5083dbf0ec6cfe631272fc00e0a9aba436fa2ac096ae53ae4bb46bfce51eedc192ab3b84fc5086664207915ef71f3f1b1497da0336978dbf778d387baa4315") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000010807041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 00:52:06 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200015, 0x0, 0x0, 0x0) [ 655.144564][ T482] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 655.406138][ T589] XFS (loop5): Invalid superblock magic number 00:52:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:07 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x109341, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7ff) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:07 executing program 0 (fault-call:4 fault-nth:1): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc0045878, &(0x7f0000000040)={0x13}) 00:52:07 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x930, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x541b, 0xa04ff9) 00:52:07 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200016, 0x0, 0x0, 0x0) 00:52:07 executing program 4: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffff9c, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0x2, 0x8}, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x2, 0x8000) ioctl(r1, 0x400, 0x0) [ 655.930677][ T607] FAULT_INJECTION: forcing a failure. [ 655.930677][ T607] name failslab, interval 1, probability 0, space 0, times 0 [ 656.001225][ T607] CPU: 1 PID: 607 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 656.009767][ T607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.019835][ T607] Call Trace: [ 656.023152][ T607] dump_stack+0x172/0x1f0 [ 656.027549][ T607] should_fail.cold+0xa/0x15 [ 656.032174][ T607] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 656.038014][ T607] ? ___might_sleep+0x163/0x280 [ 656.042897][ T607] __should_failslab+0x121/0x190 00:52:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc0045878, &(0x7f0000000040)={0x13}) [ 656.047865][ T607] should_failslab+0x9/0x14 [ 656.052396][ T607] kmem_cache_alloc_trace+0x2d1/0x760 [ 656.057830][ T607] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 656.064111][ T607] ? _copy_from_user+0xdd/0x150 [ 656.069007][ T607] copy_mount_options+0x5c/0x3a0 [ 656.073979][ T607] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 656.080246][ T607] ksys_mount+0xa7/0x150 [ 656.084523][ T607] __x64_sys_mount+0xbe/0x150 [ 656.089234][ T607] do_syscall_64+0x103/0x610 [ 656.093856][ T607] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 656.099771][ T607] RIP: 0033:0x458079 [ 656.103699][ T607] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 656.123319][ T607] RSP: 002b:00007fcbd7c88c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 656.131763][ T607] RAX: ffffffffffffffda RBX: 00007fcbd7c88c90 RCX: 0000000000458079 [ 656.139750][ T607] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 00:52:07 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200000000040c2, 0x0) perf_event_open(&(0x7f00004e7000)={0x200000002, 0x70, 0xdd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x2000000) creat(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080)=0x4, 0x4) 00:52:07 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) inotify_rm_watch(r0, 0x0) [ 656.147740][ T607] RBP: 000000000073bf00 R08: 0000000020000280 R09: 0000000000000000 [ 656.155729][ T607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbd7c896d4 [ 656.163726][ T607] R13: 00000000004c3d9d R14: 00000000004d6fb8 R15: 0000000000000005 00:52:07 executing program 0 (fault-call:4 fault-nth:2): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 656.262429][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 656.262443][ T26] audit: type=1800 audit(1552697527.381:2469): pid=830 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17942 res=0 [ 656.316266][ T613] XFS (loop5): Invalid superblock magic number [ 656.328124][ T843] FAULT_INJECTION: forcing a failure. [ 656.328124][ T843] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 656.341369][ T843] CPU: 0 PID: 843 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 656.349879][ T843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.359944][ T843] Call Trace: [ 656.363292][ T843] dump_stack+0x172/0x1f0 [ 656.367662][ T843] should_fail.cold+0xa/0x15 [ 656.372278][ T843] ? __x64_sys_mount+0xbe/0x150 [ 656.377148][ T843] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 656.382986][ T843] ? debug_smp_processor_id+0x3c/0x280 [ 656.388470][ T843] ? perf_trace_lock+0xeb/0x510 [ 656.393351][ T843] should_fail_alloc_page+0x50/0x60 [ 656.398581][ T843] __alloc_pages_nodemask+0x1a1/0x7e0 [ 656.403996][ T843] ? __alloc_pages_slowpath+0x2900/0x2900 [ 656.409728][ T843] ? find_held_lock+0x35/0x130 [ 656.414510][ T843] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 656.420340][ T843] cache_grow_begin+0x9c/0x860 [ 656.425121][ T843] ? copy_mount_options+0x5c/0x3a0 [ 656.430241][ T843] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 656.436500][ T843] kmem_cache_alloc_trace+0x67f/0x760 [ 656.441905][ T843] copy_mount_options+0x5c/0x3a0 [ 656.446878][ T843] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 656.453142][ T843] ksys_mount+0xa7/0x150 [ 656.457413][ T843] __x64_sys_mount+0xbe/0x150 [ 656.462128][ T843] do_syscall_64+0x103/0x610 00:52:07 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x3, 0x0, 0x40000004) memfd_create(&(0x7f00000000c0)='\x9a', 0x1) [ 656.466759][ T843] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 656.472668][ T843] RIP: 0033:0x458079 [ 656.476575][ T843] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 656.496197][ T843] RSP: 002b:00007fcbd7c88c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 656.496214][ T843] RAX: ffffffffffffffda RBX: 00007fcbd7c88c90 RCX: 0000000000458079 [ 656.496222][ T843] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 656.496229][ T843] RBP: 000000000073bf00 R08: 0000000020000280 R09: 0000000000000000 [ 656.496237][ T843] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbd7c896d4 [ 656.496246][ T843] R13: 00000000004c3d9d R14: 00000000004d6fb8 R15: 0000000000000005 00:52:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfsX', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc0189436, &(0x7f0000000040)={0x13}) 00:52:08 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200017, 0x0, 0x0, 0x0) 00:52:08 executing program 0 (fault-call:4 fault-nth:3): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000ffc), 0x7, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x10001, 0x4) 00:52:08 executing program 2: unshare(0x8000400) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x6001, 0x0) r0 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$unix(r1, &(0x7f00000002c0), &(0x7f0000000340)=0x6e, 0x800) inotify_rm_watch(0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x56, "2fa84a65954e2de1005e65e1f21123307b41ae963af23cd3873a353868dc5873d8478e14bf8bc62ead3e8f8541873e70c3d39a8c5f064a475bdda11355e6abf0cd3aa607002af5b3a268beaa15afd0f928f2c1650392"}, &(0x7f0000000040)=0x5e) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000140)={r4, 0xe8, "ad22615a5b737a1484af67bcaac22a38868b1f2e4037bcc783779ac4b52b8f834a9bd379e2d1cf24a0e66d24dfc24b660c624ada5076a100e228fcef53d02528a9da6ee16f56e99ed23d7e472c0709b68c1ed69cec42ff0a50ba8a2d5d2953d6bce99ea1749de61996f359bea2351e36b15f95b73a10a61a68046332c5896638407cd2289e0b060d45554ae737419f59eb589997fccc7315322fc27ea1f5bc16d360e4d789373ffa64824fc027fe31090b21e4da1aeff9688744c763a7b36c2256af7757f1b94a6c2349267849116836c571f4799eafed06d22570949f231269a602acc96985203f"}, &(0x7f0000000240)=0xf0) [ 657.053307][ T1069] FAULT_INJECTION: forcing a failure. [ 657.053307][ T1069] name failslab, interval 1, probability 0, space 0, times 0 [ 657.094424][ T1069] CPU: 0 PID: 1069 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 657.103057][ T1069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 657.113128][ T1069] Call Trace: [ 657.116436][ T1069] dump_stack+0x172/0x1f0 [ 657.120785][ T1069] should_fail.cold+0xa/0x15 [ 657.125403][ T1069] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 657.131231][ T1069] ? ___might_sleep+0x163/0x280 [ 657.136109][ T1069] __should_failslab+0x121/0x190 [ 657.141064][ T1069] should_failslab+0x9/0x14 [ 657.145578][ T1069] kmem_cache_alloc+0x2b2/0x6f0 [ 657.150442][ T1069] ? cache_grow_end+0xa4/0x190 [ 657.155228][ T1069] ? kasan_check_write+0x14/0x20 [ 657.160185][ T1069] getname_flags+0xd6/0x5b0 [ 657.164712][ T1069] user_path_at_empty+0x2f/0x50 [ 657.169586][ T1069] do_mount+0x150/0x2c40 [ 657.173853][ T1069] ? copy_mount_options+0x5c/0x3a0 [ 657.178999][ T1069] ? copy_mount_string+0x40/0x40 [ 657.183973][ T1069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 00:52:08 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x10000, 0x0) accept4$rose(r4, &(0x7f0000000480)=@full={0xb, @remote, @bcast, 0x0, [@remote, @bcast, @remote, @remote, @bcast, @rose]}, &(0x7f00000004c0)=0x40, 0x800) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x1ffffd, 0x0) r6 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000300)={r3, r6, r6}, &(0x7f0000000080)=""/107, 0x6b, 0x0) fcntl$getflags(r1, 0x401) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000440)={0x10000, 0x0, 0x1, 0x2, 0x1}, 0xc) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000180)=0x4, &(0x7f0000000500)=0x2) write$P9_RSYMLINK(r5, &(0x7f0000000380)={0x14, 0x11, 0x1, {0x4, 0x2}}, 0x14) sysinfo(&(0x7f00000007c0)=""/154) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x11b400, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) fchdir(r0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000880)=ANY=[@ANYBLOB="7261770000000000000000000000d1715aa3a7f561580000000000000000000081000010add255b2396449198cb23e71ffc69879a8d5ea78f7cb8d8673e1dabf2c8d8702d5c503001e08fd5175609666b8af66053eeb036e6166819cbddc527ca0543d4472e36a212efe350ab7275cc2c6d7ba6f84702ae0015152b5620fbbd2bf413c7a8d32385470332a3175d9dc600320392f42c7e9e785134e32cb67b2cb00000000000000000000007645748a94ca5a2ffe2ae3d3d61429c35ed909027ff6f2ae5423ffebbdf5e7c6149ebd068f4ef2fbc10c5d8d781a32c505b97fda888affae7260420dd47be05c50cca21b"], 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000340)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x8) ioctl$IOC_PR_PREEMPT(r7, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0) gettid() write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f00000001c0)={0xffffffffffffffff, r5}) [ 657.190243][ T1069] ? copy_mount_options+0x280/0x3a0 [ 657.195470][ T1069] ksys_mount+0xdb/0x150 [ 657.199732][ T1069] __x64_sys_mount+0xbe/0x150 [ 657.204462][ T1069] do_syscall_64+0x103/0x610 [ 657.204484][ T1069] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 657.204498][ T1069] RIP: 0033:0x458079 [ 657.204513][ T1069] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:52:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc020660b, &(0x7f0000000040)={0x13}) [ 657.204520][ T1069] RSP: 002b:00007fcbd7c88c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 657.204534][ T1069] RAX: ffffffffffffffda RBX: 00007fcbd7c88c90 RCX: 0000000000458079 [ 657.204543][ T1069] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 657.204551][ T1069] RBP: 000000000073bf00 R08: 0000000020000280 R09: 0000000000000000 [ 657.204559][ T1069] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbd7c896d4 [ 657.204567][ T1069] R13: 00000000004c3d9d R14: 00000000004d6fb8 R15: 0000000000000005 00:52:08 executing program 0 (fault-call:4 fault-nth:4): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:08 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200018, 0x0, 0x0, 0x0) 00:52:08 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{r0, 0x1}, {r0, 0x628}, {r1, 0x210}, {r1}, {r1, 0x1000}], 0x5, 0x1) inotify_rm_watch(0xffffffffffffffff, 0x0) accept(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000040)=0x80) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x94a2e8f56d51b01c}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r3, 0xe01, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xffffffff80000000, 0x81, 0xe4]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xa5, 0x7fff]}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x6}]}, 0x7c}}, 0xc000) 00:52:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x11}) [ 657.525269][ T1344] FAULT_INJECTION: forcing a failure. [ 657.525269][ T1344] name failslab, interval 1, probability 0, space 0, times 0 00:52:08 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700e, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0xffffffffffff7fff, {0x3, 0x81, 0xe9f, 0x248, 0x4, 0x3f}, 0xa8, 0xa}, 0xe) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x5, 0xffffffffffff87d6}, 'port1\x00', 0x14, 0x3, 0x7, 0xffffffff, 0x6, 0x140000000000000, 0x0, 0x0, 0x6, 0x6}) 00:52:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 657.683765][ T1344] CPU: 0 PID: 1344 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 657.692393][ T1344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 657.702465][ T1344] Call Trace: [ 657.705781][ T1344] dump_stack+0x172/0x1f0 [ 657.711608][ T1344] should_fail.cold+0xa/0x15 [ 657.716221][ T1344] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 657.722054][ T1344] ? ___might_sleep+0x163/0x280 [ 657.726919][ T1344] __should_failslab+0x121/0x190 [ 657.726941][ T1344] should_failslab+0x9/0x14 [ 657.726968][ T1344] kmem_cache_alloc_trace+0x2d1/0x760 [ 657.727079][ T1344] alloc_fs_context+0x5a/0x640 [ 657.736442][ T1344] fs_context_for_mount+0x25/0x30 [ 657.736458][ T1344] do_mount+0x13d7/0x2c40 [ 657.736480][ T1344] ? copy_mount_string+0x40/0x40 [ 657.736497][ T1344] ? _copy_from_user+0xdd/0x150 [ 657.736515][ T1344] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 657.736528][ T1344] ? copy_mount_options+0x280/0x3a0 [ 657.736547][ T1344] ksys_mount+0xdb/0x150 [ 657.736570][ T1344] __x64_sys_mount+0xbe/0x150 [ 657.786175][ T1344] do_syscall_64+0x103/0x610 [ 657.790792][ T1344] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 657.796695][ T1344] RIP: 0033:0x458079 [ 657.800598][ T1344] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 657.820216][ T1344] RSP: 002b:00007fcbd7c88c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 00:52:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="f2", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x41cb3ed4}, 0x20) sendmmsg$inet_sctp(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0], 0x20}], 0x4924924924924d0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000013c0)=0x9, 0x4) 00:52:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0xfdfdffff}) 00:52:09 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200019, 0x0, 0x0, 0x0) 00:52:09 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x92000, 0x0) bind$netrom(r1, &(0x7f00000000c0)={{0x3, @bcast}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) [ 657.828653][ T1344] RAX: ffffffffffffffda RBX: 00007fcbd7c88c90 RCX: 0000000000458079 [ 657.836640][ T1344] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 657.844650][ T1344] RBP: 000000000073bf00 R08: 0000000020000280 R09: 0000000000000000 [ 657.852636][ T1344] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbd7c896d4 [ 657.860618][ T1344] R13: 00000000004c3d9d R14: 00000000004d6fb8 R15: 0000000000000005 [ 657.928102][ T1425] XFS (loop5): Invalid superblock magic number 00:52:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0xfffffdfd}) 00:52:09 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020c000004000000000000000010000002001800000000000000ccb676f35e8cb2bbd0e3f42bdbc6df5e90ec1ab97522c3031a593ab040cd58181a5defe62d799148e028bda13d50c49cf2982bd13f4ea26a9952ad86d567810ace034d5b96f7a8d9a938885e3f35826d40c26ec3efbc08c4359a158e1abfed46a1222953bb0e77e41f02e90b195c8d7b22f16bb3db2216947c47338cfc5eea35c8a9a9be3fd276d100040000a1fc7c4a35e4e0bfaa7b3d97c5"], 0x20}}, 0x0) 00:52:09 executing program 0 (fault-call:4 fault-nth:5): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:09 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x102, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup2(r0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x117}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @ipv4={[], [], @local}, 0xf3}, r3}}, 0xc3) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0xfdfdffff00000000}) 00:52:09 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000019c0)={0x20}, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2, r2}) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000340)={0x3, 0x3}) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$int_in(r0, 0x800000c0045005, 0x0) getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000280), 0x4) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) r3 = fcntl$dupfd(r1, 0x3, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf7fffffffffffffd, 0x2012, r2, 0x0) fstat(r0, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000200)=""/83, &(0x7f0000000300)=0x53) syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x9, 0x0) unshare(0x40000000) 00:52:09 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x20001a, 0x0, 0x0, 0x0) [ 658.282040][ T1677] FAULT_INJECTION: forcing a failure. [ 658.282040][ T1677] name failslab, interval 1, probability 0, space 0, times 0 [ 658.363021][ T1677] CPU: 1 PID: 1677 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 658.371653][ T1677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 658.377334][ T1681] IPVS: ftp: loaded support on port[0] = 21 [ 658.381715][ T1677] Call Trace: [ 658.381746][ T1677] dump_stack+0x172/0x1f0 [ 658.381772][ T1677] should_fail.cold+0xa/0x15 [ 658.381795][ T1677] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 658.381819][ T1677] ? ___might_sleep+0x163/0x280 [ 658.381841][ T1677] __should_failslab+0x121/0x190 [ 658.381864][ T1677] should_failslab+0x9/0x14 [ 658.381884][ T1677] kmem_cache_alloc_trace+0x2d1/0x760 [ 658.381901][ T1677] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 658.381918][ T1677] ? rcu_read_lock_sched_held+0x110/0x130 [ 658.381939][ T1677] ? kmem_cache_alloc_trace+0x354/0x760 [ 658.381979][ T1677] legacy_init_fs_context+0x48/0xe0 [ 658.447753][ T1677] ? generic_parse_monolithic+0x200/0x200 [ 658.453501][ T1677] alloc_fs_context+0x365/0x640 [ 658.458381][ T1677] fs_context_for_mount+0x25/0x30 [ 658.463429][ T1677] do_mount+0x13d7/0x2c40 [ 658.467789][ T1677] ? copy_mount_string+0x40/0x40 [ 658.472763][ T1677] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 658.479023][ T1677] ? copy_mount_options+0x280/0x3a0 [ 658.479042][ T1677] ksys_mount+0xdb/0x150 [ 658.479057][ T1677] __x64_sys_mount+0xbe/0x150 [ 658.479077][ T1677] do_syscall_64+0x103/0x610 [ 658.479098][ T1677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 658.479111][ T1677] RIP: 0033:0x458079 [ 658.479128][ T1677] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 658.479147][ T1677] RSP: 002b:00007fcbd7c88c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 658.479161][ T1677] RAX: ffffffffffffffda RBX: 00007fcbd7c88c90 RCX: 0000000000458079 [ 658.479168][ T1677] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 658.479176][ T1677] RBP: 000000000073bf00 R08: 0000000020000280 R09: 0000000000000000 [ 658.479184][ T1677] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbd7c896d4 [ 658.479192][ T1677] R13: 00000000004c3d9d R14: 00000000004d6fb8 R15: 0000000000000005 00:52:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:10 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000580)={0x3, &(0x7f0000000540)=[0x3, 0x10001, 0xfffffffffffffff7]}) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x400) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x726, 0x5, &(0x7f0000000400)=[{&(0x7f0000000180)="b39bd38e99ac2edbd802df68272161a49f38be4d6060d1b39743165a1fd7b0527878ee7c808f7ef9994089190919416ca04868e368fb0bbf60c5dcee1e29091b1654c87e30e8bf485a0df11d8880c0b837ccb3066d4a92571d109e0527fc0cf1cca47c23a823b43a4d246dd93fe32e14b6449cfab1ae72bd820003864a6e4e", 0x7f, 0xc5}, {&(0x7f0000000200)="bcb289f55747c56100046da70e2b198b17efc1fcd396475c1e3558a82828d78c2274b039a98be0d102ccecf3164ac9f3b1a434df7ad54e145e", 0x39, 0x4}, {&(0x7f0000000240)="79ed47a9ecefaf53351759aaf351181e963346f6e047ab703df978d35af1113cd8c1b57aac9ea68a", 0x28, 0x80}, {&(0x7f0000000280)="3c103c2448027c3a0b7e09b8837e65bad1c4d27ca255e9815c20514bbadbc2868f6680a850ba2724b9362a2489bed8d0085bd663a844488a32ab117c8b662a6b91e44de668f0530abd", 0x49, 0x3}, {&(0x7f0000000300)="849801477f06080262ed6a5b513693c999e03dc343815603e646fa422d8917cc42113f031adfcca5387ef1399d59c2feddc74ed92fb14fde8ea78ac01bc44f622e7fd3a40deb0b338d8e5a52fcaa6a8ae47ef3e2af9aba8bd032bed5e4f969011fe5b4fca27e10be51e513d51daf9952484770120ecbcd7d42332e418aa550ae26866c6970bca5fc74f09d26d3868c114c3226c84b43ea57570545e6a1ec4b04e0e491697eae883c6176807e6f1b942c976ae360e4843cafe960528dc7624b57d9f6359c2ce979dc9745831982f0547b83ede48753f3ef1ac33c62968a52a51ae7725aa432162767", 0xe8, 0xfffffffffffffff8}], 0x8000, &(0x7f0000000480)={[{@nombcache='nombcache'}, {@nouid32='nouid32'}, {@nodiscard='nodiscard'}], [{@obj_role={'obj_role', 0x3d, '/dev/vga_arbiter\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-).'}}, {@obj_role={'obj_role', 0x3d, 'bdevselinuxposix_acl_access\''}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/vga_arbiter\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/midi#\x00'}}]}) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x4) 00:52:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0xfdfdffff}) 00:52:10 executing program 0 (fault-call:4 fault-nth:6): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:10 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x20001b, 0x0, 0x0, 0x0) [ 659.040200][ T1699] FAULT_INJECTION: forcing a failure. [ 659.040200][ T1699] name failslab, interval 1, probability 0, space 0, times 0 [ 659.088221][ T1695] XFS (loop5): Invalid superblock magic number [ 659.131137][ T1699] CPU: 1 PID: 1699 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 659.139766][ T1699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 659.149840][ T1699] Call Trace: [ 659.153160][ T1699] dump_stack+0x172/0x1f0 [ 659.157523][ T1699] should_fail.cold+0xa/0x15 [ 659.162134][ T1699] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 659.167976][ T1699] ? ___might_sleep+0x163/0x280 [ 659.172845][ T1699] __should_failslab+0x121/0x190 [ 659.177991][ T1699] should_failslab+0x9/0x14 [ 659.182521][ T1699] kmem_cache_alloc_trace+0x2d1/0x760 [ 659.187920][ T1699] ? legacy_init_fs_context+0x48/0xe0 [ 659.193325][ T1699] ? rcu_read_lock_sched_held+0x110/0x130 [ 659.199071][ T1699] ? kmem_cache_alloc_trace+0x354/0x760 [ 659.204717][ T1699] v9fs_mount+0x5e/0x920 [ 659.208999][ T1699] ? v9fs_write_inode+0x70/0x70 [ 659.213873][ T1699] legacy_get_tree+0xf2/0x200 [ 659.218570][ T1699] vfs_get_tree+0x123/0x450 [ 659.223100][ T1699] do_mount+0x1436/0x2c40 00:52:10 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x20001c, 0x0, 0x0, 0x0) [ 659.227498][ T1699] ? copy_mount_string+0x40/0x40 [ 659.232463][ T1699] ? _copy_from_user+0xdd/0x150 [ 659.237346][ T1699] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 659.243609][ T1699] ? copy_mount_options+0x280/0x3a0 [ 659.248838][ T1699] ksys_mount+0xdb/0x150 [ 659.253119][ T1699] __x64_sys_mount+0xbe/0x150 [ 659.257830][ T1699] do_syscall_64+0x103/0x610 [ 659.262452][ T1699] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 659.268408][ T1699] RIP: 0033:0x458079 [ 659.272324][ T1699] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 659.294996][ T1699] RSP: 002b:00007fcbd7c88c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 659.303457][ T1699] RAX: ffffffffffffffda RBX: 00007fcbd7c88c90 RCX: 0000000000458079 [ 659.311461][ T1699] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 659.319463][ T1699] RBP: 000000000073bf00 R08: 0000000020000280 R09: 0000000000000000 00:52:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0xfffffdfd}) 00:52:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17, 0x5b03}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x8) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000000c0)) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000001c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x11}}, 0x55, r3}) 00:52:10 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x40000, 0x0) r2 = fcntl$getown(r0, 0x9) ptrace$setopts(0xffffffffffffffff, r2, 0xb58, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) [ 659.327464][ T1699] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbd7c896d4 [ 659.335464][ T1699] R13: 00000000004c3d9d R14: 00000000004d6fb8 R15: 0000000000000005 00:52:10 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x20001d, 0x0, 0x0, 0x0) 00:52:10 executing program 0 (fault-call:4 fault-nth:7): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0xfdfdffff00000000}) [ 659.605230][ T1867] FAULT_INJECTION: forcing a failure. [ 659.605230][ T1867] name failslab, interval 1, probability 0, space 0, times 0 [ 659.676276][ T1867] CPU: 0 PID: 1867 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 659.684901][ T1867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 659.694973][ T1867] Call Trace: [ 659.698287][ T1867] dump_stack+0x172/0x1f0 [ 659.702635][ T1867] should_fail.cold+0xa/0x15 [ 659.707249][ T1867] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 659.714547][ T1867] ? ___might_sleep+0x163/0x280 [ 659.719414][ T1867] __should_failslab+0x121/0x190 [ 659.724366][ T1867] should_failslab+0x9/0x14 [ 659.728880][ T1867] __kmalloc_track_caller+0x2d8/0x740 [ 659.734262][ T1867] ? perf_trace_lock+0xeb/0x510 [ 659.739144][ T1867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 659.745268][ T1867] ? v9fs_session_init+0xae/0x1960 [ 659.750396][ T1867] kstrdup+0x3a/0x70 [ 659.754307][ T1867] v9fs_session_init+0xae/0x1960 [ 659.759256][ T1867] ? find_held_lock+0x35/0x130 [ 659.764031][ T1867] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 659.769671][ T1867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 659.775921][ T1867] ? should_fail+0x1de/0x852 [ 659.780542][ T1867] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 659.786374][ T1867] ? v9fs_show_options+0x7e0/0x7e0 [ 659.791507][ T1867] ? v9fs_mount+0x5e/0x920 [ 659.795933][ T1867] ? rcu_read_lock_sched_held+0x110/0x130 [ 659.801683][ T1867] ? kmem_cache_alloc_trace+0x354/0x760 [ 659.807251][ T1867] ? legacy_init_fs_context+0x48/0xe0 [ 659.812642][ T1867] ? rcu_read_lock_sched_held+0x110/0x130 [ 659.818387][ T1867] v9fs_mount+0x7d/0x920 [ 659.822653][ T1867] ? v9fs_write_inode+0x70/0x70 [ 659.827518][ T1867] legacy_get_tree+0xf2/0x200 [ 659.832204][ T1867] vfs_get_tree+0x123/0x450 [ 659.836717][ T1867] do_mount+0x1436/0x2c40 [ 659.841069][ T1867] ? copy_mount_string+0x40/0x40 [ 659.846025][ T1867] ? _copy_from_user+0xdd/0x150 [ 659.850894][ T1867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 659.857157][ T1867] ? copy_mount_options+0x280/0x3a0 [ 659.857176][ T1867] ksys_mount+0xdb/0x150 [ 659.857192][ T1867] __x64_sys_mount+0xbe/0x150 [ 659.857212][ T1867] do_syscall_64+0x103/0x610 [ 659.857231][ T1867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 659.857242][ T1867] RIP: 0033:0x458079 [ 659.857257][ T1867] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 659.857264][ T1867] RSP: 002b:00007fcbd7c88c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 659.857286][ T1867] RAX: ffffffffffffffda RBX: 00007fcbd7c88c90 RCX: 0000000000458079 00:52:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:11 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x6, 0x10000) r3 = getpgid(0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x4a0, 0x278, 0x0, 0x278, 0x3b8, 0x3b8, 0x3b8, 0x4, &(0x7f00000002c0), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac, @multicast1, @remote, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x25}, @local, 0xffffffff, 0x0, @empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0xff, 0xff]}, 0x3, 0xfffffffffffffffc, 0x9, 0xf5, 0xa6, 0x4, 'hsr0\x00', 'vlan0\x00', {0xff}, {0xff}}, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7f, 'syz0\x00', 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x16}, @empty, 0xffffffff, 0xffffffff, @mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0xff]}, @empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x2, 0x7f, 0x8, 0x8, 0x3, 0x9, 'yam0\x00', 'rose0\x00', {}, {}, 0x0, 0x184}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @rand_addr=0x1, 0x2, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000001c0)={0xd9c, 0x6, r3, 0x0, r4, 0x0, 0x1, 0xe7f}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x200) setxattr$security_smack_transmute(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000280)='TRUE', 0x4, 0x1) setpriority(0x0, r3, 0x1) 00:52:11 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '&9\xb3X\xc1|\x04\x03{]\xa6\x86ldk\x00\xd0C\x96\x8e\x89\xfa\x8c\xbaG\xc8\x00\x00\x00\x00\x80\x00\x00\x01Z\xc8O\x9d\x9fd1C\xd5\xcb\xebr\xe1@gd\x1f\x06\xaa@\x06mJ\xdb\x1fpD\xe3\x05\xb4\xc0\np:96\x1e2\xe7\x1bJ\x12\xf7\xd8\r\x1f\'\xc5\xaa8Tx\x9a\x93<\x85\xed\xa6`Vi>\xa3h'}, 0x67) 00:52:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0xfdfdffff}) 00:52:11 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x20001e, 0x0, 0x0, 0x0) 00:52:11 executing program 0 (fault-call:4 fault-nth:8): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 659.866705][ T1867] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 659.866714][ T1867] RBP: 000000000073bf00 R08: 0000000020000280 R09: 0000000000000000 [ 659.866723][ T1867] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbd7c896d4 [ 659.866733][ T1867] R13: 00000000004c3d9d R14: 00000000004d6fb8 R15: 0000000000000005 00:52:11 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="85000000dd3800697e424d6e053e8a94aec7ed795d0000000000000095000000000000d10ef8f541eed49d0890b497f1fb935264785c61aeaad2"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x0, 0x1) r2 = getpgrp(0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000480)={0x0, 0x0, 0x100000001}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000004c0)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000500)={r3, r4, 0x6}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000400)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000440)={0x3f, 0x2, r2, 0x0, r5, 0x0, 0x80, 0x1}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="88000000", @ANYRES16=r6, @ANYBLOB="002127bd7000fedbdf250500000060c0a87a080004004e2300000c000700000000000000000008010900690000009755bd494431888b9c30bf080008009150eb0008000b007369700008000200ff000000080009003300000008000600666f00000c00020008000500cd9f00000800060000020000080006000200000005000600000000000000000000000000"], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x4891) syz_open_dev$audion(&(0x7f0000000600)='/dev/audio#\x00', 0x204000000eb, 0x10000) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000700)={0x7, 0x7, 0x7, 0x4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x16, 0x0, &(0x7f0000000200)="26a87dc00356000000000000000000000000000000009ebd7fc6ab7a92e2a946d95f9ac345d9e8e4817dc82a9f58f2855a7bf67461889e1565ba9f6f716a25bec2211ebe5cf7ec32f3934452b66fdea9081535436439c440749e23cbe2c7477a0f0af7ff4a0246ddb7e4c8eeb02bb19f867d66808ba2e45de9e52ddc3ae7e966b0a9cf75bb491cf8e9350dfde62d9200852beaa5f0c1df1a289e212042eb49f278cb30c710f5182c7ce155a89ac392fc04986fe936091b65ae8e05c0784ef7c3c0607c", 0x0, 0x1000}, 0x16f) [ 660.096681][ T1952] FAULT_INJECTION: forcing a failure. [ 660.096681][ T1952] name failslab, interval 1, probability 0, space 0, times 0 [ 660.157192][ T1952] CPU: 0 PID: 1952 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 660.165826][ T1952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 660.175903][ T1952] Call Trace: [ 660.179246][ T1952] dump_stack+0x172/0x1f0 [ 660.183600][ T1952] should_fail.cold+0xa/0x15 [ 660.188218][ T1952] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 660.194050][ T1952] ? ___might_sleep+0x163/0x280 [ 660.198937][ T1952] __should_failslab+0x121/0x190 [ 660.203916][ T1952] should_failslab+0x9/0x14 [ 660.208461][ T1952] kmem_cache_alloc_trace+0x2d1/0x760 [ 660.213846][ T1952] ? find_held_lock+0x35/0x130 [ 660.218626][ T1952] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 660.224277][ T1952] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 660.230641][ T1952] p9_client_create+0xcb/0x1400 [ 660.235518][ T1952] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 660.241351][ T1952] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 660.247631][ T1952] ? p9_client_zc_rpc.constprop.0+0x10c0/0x10c0 [ 660.253898][ T1952] ? rcu_read_lock_sched_held+0x110/0x130 [ 660.259639][ T1952] ? __kmalloc_track_caller+0x5d1/0x740 [ 660.265211][ T1952] ? lockdep_init_map+0x1be/0x6d0 [ 660.270273][ T1952] v9fs_session_init+0x1e7/0x1960 [ 660.275318][ T1952] ? v9fs_session_init+0x1e7/0x1960 [ 660.280539][ T1952] ? find_held_lock+0x35/0x130 [ 660.285329][ T1952] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 660.291002][ T1952] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 660.297277][ T1952] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 660.303107][ T1952] ? v9fs_show_options+0x7e0/0x7e0 [ 660.308248][ T1952] ? v9fs_mount+0x5e/0x920 [ 660.312691][ T1952] ? rcu_read_lock_sched_held+0x110/0x130 [ 660.318440][ T1952] ? kmem_cache_alloc_trace+0x354/0x760 [ 660.324008][ T1952] ? legacy_init_fs_context+0x48/0xe0 [ 660.329404][ T1952] ? rcu_read_lock_sched_held+0x110/0x130 [ 660.335151][ T1952] v9fs_mount+0x7d/0x920 [ 660.339438][ T1952] ? v9fs_write_inode+0x70/0x70 [ 660.344332][ T1952] legacy_get_tree+0xf2/0x200 [ 660.349032][ T1952] vfs_get_tree+0x123/0x450 [ 660.353557][ T1952] do_mount+0x1436/0x2c40 [ 660.357915][ T1952] ? copy_mount_string+0x40/0x40 [ 660.362882][ T1952] ? _copy_from_user+0xdd/0x150 [ 660.367752][ T1952] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 660.374008][ T1952] ? copy_mount_options+0x280/0x3a0 [ 660.379226][ T1952] ksys_mount+0xdb/0x150 [ 660.383481][ T1952] __x64_sys_mount+0xbe/0x150 [ 660.388177][ T1952] do_syscall_64+0x103/0x610 [ 660.392788][ T1952] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 660.398697][ T1952] RIP: 0033:0x458079 00:52:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0xfffffdfd}) 00:52:11 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200021, 0x0, 0x0, 0x0) 00:52:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"]) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x17, 0x0, [{0x390}]}) [ 660.402605][ T1952] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 660.422228][ T1952] RSP: 002b:00007fcbd7c88c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 660.430655][ T1952] RAX: ffffffffffffffda RBX: 00007fcbd7c88c90 RCX: 0000000000458079 [ 660.438636][ T1952] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 660.446702][ T1952] RBP: 000000000073bf00 R08: 0000000020000280 R09: 0000000000000000 00:52:11 executing program 2: unshare(0x2000900) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000040)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x3bd}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x5, 0x7f, 0x200, 0x20, 0x9, 0x6, 0x800, 0xffffffffffffff3d, r2}, 0x20) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/223) inotify_rm_watch(0xffffffffffffffff, 0x0) [ 660.446712][ T1952] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbd7c896d4 [ 660.446721][ T1952] R13: 00000000004c3d9d R14: 00000000004d6fb8 R15: 0000000000000005 00:52:11 executing program 2: unshare(0x8000400) r0 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0xb, 0x2) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L-', 0x7}, 0x28, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x8, &(0x7f0000000000)=@raw=[@generic={0x7ff, 0x1ff, 0x8, 0x57, 0x3}, @ldst={0x3, 0x3, 0x0, 0x7, 0xf, 0xfffffffffffffffe, 0x18}, @call={0x85, 0x0, 0x0, 0x58}, @exit, @alu={0x7, 0x9c9e000000, 0x1, 0x5, 0x0, 0x80, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0xfffffffffffff073}, @call={0x85, 0x0, 0x0, 0x2d}], &(0x7f00000001c0)='syzkaller\x00', 0x10000, 0xa3, &(0x7f0000000200)=""/163, 0x41100, 0x1, [], r3, 0xd}, 0x48) [ 660.621031][ T1957] XFS (loop5): Invalid superblock magic number 00:52:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:12 executing program 0 (fault-call:4 fault-nth:9): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:12 executing program 4: mkdir(&(0x7f0000000880)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',lowerdir=.:file0,workdir=.']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/172, 0xac}, {&(0x7f0000000080)=""/76, 0x4c}, {&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f0000000480)=""/131, 0x83}, {&(0x7f00000001c0)=""/54, 0x36}], 0x5) getgroups(0x0, &(0x7f00000001c0)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fchmodat(r0, &(0x7f00000006c0)='./file0\x00', 0xc0) getdents64(r0, &(0x7f0000000240)=""/65, 0x18) 00:52:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0xfdfdffff00000000}) 00:52:12 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200022, 0x0, 0x0, 0x0) 00:52:12 executing program 2: r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x200000000000000, 0x220a80) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000040)={0xd66, 0x7f, 0xfff, 0x0, 0x77}) unshare(0x40000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/24) [ 661.239084][ T2199] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 661.258344][ T2197] IPVS: ftp: loaded support on port[0] = 21 [ 661.271110][ T2203] FAULT_INJECTION: forcing a failure. [ 661.271110][ T2203] name failslab, interval 1, probability 0, space 0, times 0 [ 661.319217][ T2203] CPU: 0 PID: 2203 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 661.327856][ T2203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 661.337927][ T2203] Call Trace: [ 661.341263][ T2203] dump_stack+0x172/0x1f0 [ 661.345617][ T2203] should_fail.cold+0xa/0x15 [ 661.350233][ T2203] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 661.356073][ T2203] ? ___might_sleep+0x163/0x280 [ 661.361041][ T2203] __should_failslab+0x121/0x190 [ 661.366019][ T2203] should_failslab+0x9/0x14 [ 661.370541][ T2203] __kmalloc_track_caller+0x2d8/0x740 [ 661.375942][ T2203] ? perf_trace_lock+0xeb/0x510 [ 661.380837][ T2203] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 661.386921][ T2203] ? debug_smp_processor_id+0x3c/0x280 [ 661.392433][ T2203] ? v9fs_session_init+0xef/0x1960 [ 661.397588][ T2203] kstrdup+0x3a/0x70 [ 661.401508][ T2203] v9fs_session_init+0xef/0x1960 [ 661.406463][ T2203] ? find_held_lock+0x35/0x130 [ 661.411253][ T2203] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 661.416893][ T2203] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 661.423156][ T2203] ? should_fail+0x1de/0x852 [ 661.427772][ T2203] ? find_held_lock+0x35/0x130 [ 661.432551][ T2203] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 661.438375][ T2203] ? v9fs_show_options+0x7e0/0x7e0 [ 661.443502][ T2203] ? v9fs_mount+0x5e/0x920 [ 661.447929][ T2203] ? rcu_read_lock_sched_held+0x110/0x130 [ 661.453679][ T2203] ? kmem_cache_alloc_trace+0x354/0x760 [ 661.459242][ T2203] ? legacy_init_fs_context+0x48/0xe0 [ 661.464634][ T2203] ? rcu_read_lock_sched_held+0x110/0x130 [ 661.470378][ T2203] v9fs_mount+0x7d/0x920 [ 661.474636][ T2203] ? v9fs_write_inode+0x70/0x70 [ 661.479494][ T2203] legacy_get_tree+0xf2/0x200 [ 661.484186][ T2203] vfs_get_tree+0x123/0x450 [ 661.488705][ T2203] do_mount+0x1436/0x2c40 [ 661.493042][ T2203] ? retint_kernel+0x2d/0x2d [ 661.497650][ T2203] ? copy_mount_string+0x40/0x40 [ 661.502600][ T2203] ? copy_mount_options+0x208/0x3a0 [ 661.507815][ T2203] ? write_comp_data+0x1e/0x70 [ 661.512606][ T2203] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 661.518868][ T2203] ? copy_mount_options+0x280/0x3a0 [ 661.524091][ T2203] ksys_mount+0xdb/0x150 [ 661.528353][ T2203] __x64_sys_mount+0xbe/0x150 [ 661.533051][ T2203] do_syscall_64+0x103/0x610 [ 661.537753][ T2203] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 661.543654][ T2203] RIP: 0033:0x458079 [ 661.547567][ T2203] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:52:12 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x800, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f00000001c0)={0x10005, 0x0, &(0x7f0000fdf000/0x3000)=nil}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x3, 0x4, 0xffffffff, r1}) read(r0, &(0x7f0000000300)=""/140, 0x8c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000140)={0x9, 0x1, 0x8}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000000)="26660feb130f01c90f01d167dacf0f73f200360f009b00000f23ef662e6464f226db4b2867f018792c0f01c8", 0x2c}], 0x1, 0x2, &(0x7f0000000080)=[@cr4={0x1, 0x600000}], 0x1) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x1e2, 0x0, 0x0, 0x131) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0]) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:52:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0xfdfdffff}) [ 661.567195][ T2203] RSP: 002b:00007fcbd7c88c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 661.575621][ T2203] RAX: ffffffffffffffda RBX: 00007fcbd7c88c90 RCX: 0000000000458079 [ 661.583603][ T2203] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 661.583613][ T2203] RBP: 000000000073bf00 R08: 0000000020000280 R09: 0000000000000000 [ 661.583621][ T2203] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbd7c896d4 [ 661.583629][ T2203] R13: 00000000004c3d9d R14: 00000000004d6fb8 R15: 0000000000000005 00:52:12 executing program 0 (fault-call:4 fault-nth:10): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 661.690269][ T2202] XFS (loop5): Invalid superblock magic number 00:52:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0xfffffdfd}) [ 661.771198][ T2350] FAULT_INJECTION: forcing a failure. [ 661.771198][ T2350] name failslab, interval 1, probability 0, space 0, times 0 00:52:12 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200023, 0x0, 0x0, 0x0) [ 661.843666][ T2350] CPU: 1 PID: 2350 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 661.852300][ T2350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 661.862367][ T2350] Call Trace: [ 661.865682][ T2350] dump_stack+0x172/0x1f0 [ 661.870083][ T2350] should_fail.cold+0xa/0x15 [ 661.874702][ T2350] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 661.880541][ T2350] ? ___might_sleep+0x163/0x280 [ 661.885419][ T2350] __should_failslab+0x121/0x190 [ 661.890392][ T2350] should_failslab+0x9/0x14 [ 661.894917][ T2350] __kmalloc_track_caller+0x2d8/0x740 [ 661.900324][ T2350] ? p9_client_create+0xcb/0x1400 [ 661.905395][ T2350] ? rcu_read_lock_sched_held+0x110/0x130 [ 661.911151][ T2350] ? kmem_cache_alloc_trace+0x354/0x760 [ 661.916814][ T2350] ? p9_client_create+0x45d/0x1400 [ 661.921947][ T2350] kstrdup+0x3a/0x70 [ 661.925977][ T2350] p9_client_create+0x45d/0x1400 [ 661.930930][ T2350] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 661.936768][ T2350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 661.943031][ T2350] ? p9_client_zc_rpc.constprop.0+0x10c0/0x10c0 [ 661.949306][ T2350] ? rcu_read_lock_sched_held+0x110/0x130 [ 661.955054][ T2350] ? __kmalloc_track_caller+0x5d1/0x740 [ 661.960667][ T2350] ? lockdep_init_map+0x1be/0x6d0 [ 661.965730][ T2350] v9fs_session_init+0x1e7/0x1960 [ 661.970781][ T2350] ? v9fs_session_init+0x1e7/0x1960 [ 661.976095][ T2350] ? find_held_lock+0x35/0x130 [ 661.980900][ T2350] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 661.986565][ T2350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 661.992845][ T2350] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 661.998691][ T2350] ? v9fs_show_options+0x7e0/0x7e0 [ 662.003834][ T2350] ? v9fs_mount+0x5e/0x920 [ 662.008270][ T2350] ? rcu_read_lock_sched_held+0x110/0x130 [ 662.014013][ T2350] ? kmem_cache_alloc_trace+0x354/0x760 [ 662.019581][ T2350] ? legacy_init_fs_context+0x48/0xe0 [ 662.024983][ T2350] ? rcu_read_lock_sched_held+0x110/0x130 [ 662.030776][ T2350] v9fs_mount+0x7d/0x920 [ 662.035046][ T2350] ? v9fs_write_inode+0x70/0x70 [ 662.039910][ T2350] legacy_get_tree+0xf2/0x200 [ 662.044617][ T2350] vfs_get_tree+0x123/0x450 [ 662.049141][ T2350] do_mount+0x1436/0x2c40 [ 662.053501][ T2350] ? copy_mount_string+0x40/0x40 [ 662.058468][ T2350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 662.064742][ T2350] ? copy_mount_options+0x280/0x3a0 [ 662.069976][ T2350] ksys_mount+0xdb/0x150 [ 662.074242][ T2350] __x64_sys_mount+0xbe/0x150 [ 662.078937][ T2350] do_syscall_64+0x103/0x610 [ 662.083565][ T2350] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 662.089469][ T2350] RIP: 0033:0x458079 [ 662.093380][ T2350] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 662.113006][ T2350] RSP: 002b:00007fcbd7c88c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 662.121437][ T2350] RAX: ffffffffffffffda RBX: 00007fcbd7c88c90 RCX: 0000000000458079 [ 662.129510][ T2350] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 00:52:13 executing program 4: r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x9, 0x209e1e, 0x408000000001}, 0x2c) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x2}, 0x2c) [ 662.137506][ T2350] RBP: 000000000073bf00 R08: 0000000020000280 R09: 0000000000000000 [ 662.145538][ T2350] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbd7c896d4 [ 662.153532][ T2350] R13: 00000000004c3d9d R14: 00000000004d6fb8 R15: 0000000000000005 00:52:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 00:52:13 executing program 4: r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x9, 0x209e1e, 0x408000000001}, 0x2c) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x2}, 0x2c) 00:52:13 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200024, 0x0, 0x0, 0x0) 00:52:13 executing program 2: unshare(0x8000400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x50000, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000140), &(0x7f0000000040)=0xc) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:13 executing program 0 (fault-call:4 fault-nth:11): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 662.558323][ T2560] FAULT_INJECTION: forcing a failure. [ 662.558323][ T2560] name failslab, interval 1, probability 0, space 0, times 0 [ 662.663731][ T2560] CPU: 0 PID: 2560 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 662.672366][ T2560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 662.682439][ T2560] Call Trace: [ 662.685760][ T2560] dump_stack+0x172/0x1f0 [ 662.690120][ T2560] should_fail.cold+0xa/0x15 [ 662.694736][ T2560] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 662.700566][ T2560] ? ___might_sleep+0x163/0x280 [ 662.705444][ T2560] __should_failslab+0x121/0x190 00:52:13 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x4100, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000001c0)={0x0, 0x1e, 0xd3, 0x7cff01, "304404c274aa417d81ff0114413ae5eb7588d577ce29336d360847390c896530"}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x9, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, 0x0, 0xfffffffffffffdcb) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000240)=[0x7ae, 0x5c056301, 0xe8e, 0x3, 0x4, 0x271, 0x4], 0x7, 0x3, 0x3f, 0x1, 0x7, 0x8, {0x2, 0xffff, 0x4, 0x200, 0x2, 0x3, 0x4, 0x6, 0x20, 0x4, 0x5, 0xc5f2, 0x8, 0x3, "de8478ac826784e3ec796522910a3d3d33e15c2950a09febe664fa091fedefd1"}}) r4 = getpid() request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='/dev/ptmx\x00', 0x0) sched_setscheduler(r4, 0x5, &(0x7f0000000040)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_ifreq(r2, 0x0, &(0x7f0000000200)={'dummy0\x00', @ifru_addrs=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x4010080}}) ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) dup3(r6, r5, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r7, &(0x7f0000000080)={0x2000}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000140)={0x20004000}) [ 662.713864][ T2560] should_failslab+0x9/0x14 [ 662.718385][ T2560] __kmalloc_track_caller+0x2d8/0x740 [ 662.723780][ T2560] ? match_strdup+0x57/0x80 [ 662.728304][ T2560] kmemdup_nul+0x31/0xa0 [ 662.732562][ T2560] match_strdup+0x57/0x80 [ 662.737017][ T2560] p9_client_create+0x56d/0x1400 [ 662.741991][ T2560] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 662.747823][ T2560] ? p9_client_zc_rpc.constprop.0+0x10c0/0x10c0 [ 662.754083][ T2560] ? rcu_read_lock_sched_held+0x110/0x130 [ 662.759827][ T2560] ? lockdep_init_map+0x1be/0x6d0 [ 662.764877][ T2560] v9fs_session_init+0x1e7/0x1960 [ 662.769922][ T2560] ? v9fs_session_init+0x1e7/0x1960 [ 662.775153][ T2560] ? find_held_lock+0x35/0x130 [ 662.779943][ T2560] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 662.785607][ T2560] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 662.791874][ T2560] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 662.797710][ T2560] ? v9fs_show_options+0x7e0/0x7e0 [ 662.802882][ T2560] ? v9fs_mount+0x5e/0x920 [ 662.807335][ T2560] ? rcu_read_lock_sched_held+0x110/0x130 00:52:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) [ 662.813084][ T2560] ? kmem_cache_alloc_trace+0x354/0x760 [ 662.819241][ T2560] ? legacy_init_fs_context+0x48/0xe0 [ 662.824632][ T2560] ? rcu_read_lock_sched_held+0x110/0x130 [ 662.830465][ T2560] v9fs_mount+0x7d/0x920 [ 662.834730][ T2560] ? v9fs_write_inode+0x70/0x70 [ 662.839610][ T2560] legacy_get_tree+0xf2/0x200 [ 662.844313][ T2560] vfs_get_tree+0x123/0x450 [ 662.848838][ T2560] do_mount+0x1436/0x2c40 [ 662.853186][ T2560] ? copy_mount_string+0x40/0x40 [ 662.858136][ T2560] ? _copy_from_user+0xdd/0x150 [ 662.863015][ T2560] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 662.869273][ T2560] ? copy_mount_options+0x280/0x3a0 [ 662.874498][ T2560] ksys_mount+0xdb/0x150 [ 662.878768][ T2560] __x64_sys_mount+0xbe/0x150 [ 662.883489][ T2560] do_syscall_64+0x103/0x610 [ 662.888097][ T2560] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 662.894012][ T2560] RIP: 0033:0x458079 [ 662.897916][ T2560] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 662.917543][ T2560] RSP: 002b:00007fcbd7c88c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 662.925989][ T2560] RAX: ffffffffffffffda RBX: 00007fcbd7c88c90 RCX: 0000000000458079 [ 662.933996][ T2560] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 662.941996][ T2560] RBP: 000000000073bf00 R08: 0000000020000280 R09: 0000000000000000 [ 662.950006][ T2560] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbd7c896d4 00:52:14 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200025, 0x0, 0x0, 0x0) 00:52:14 executing program 2: socketpair$unix(0x1, 0x200000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) [ 662.958002][ T2560] R13: 00000000004c3d9d R14: 00000000004d6fb8 R15: 0000000000000005 00:52:14 executing program 0 (fault-call:4 fault-nth:12): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 663.011219][ T2561] XFS (loop5): Invalid superblock magic number 00:52:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) [ 663.375467][ T2600] FAULT_INJECTION: forcing a failure. [ 663.375467][ T2600] name failslab, interval 1, probability 0, space 0, times 0 [ 663.394657][ T2600] CPU: 1 PID: 2600 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 663.403278][ T2600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 663.413345][ T2600] Call Trace: [ 663.416668][ T2600] dump_stack+0x172/0x1f0 [ 663.421015][ T2600] should_fail.cold+0xa/0x15 [ 663.425608][ T2600] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 663.431430][ T2600] ? ___might_sleep+0x163/0x280 [ 663.436282][ T2600] __should_failslab+0x121/0x190 [ 663.441242][ T2600] should_failslab+0x9/0x14 [ 663.445740][ T2600] __kmalloc_track_caller+0x2d8/0x740 [ 663.451103][ T2600] ? kfree+0xcf/0x230 [ 663.455074][ T2600] ? p9_client_create+0x82c/0x1400 [ 663.460175][ T2600] ? v9fs_session_init+0x1e7/0x1960 [ 663.465363][ T2600] ? v9fs_mount+0x7d/0x920 [ 663.469765][ T2600] ? legacy_get_tree+0xf2/0x200 [ 663.474610][ T2600] ? vfs_get_tree+0x123/0x450 [ 663.479278][ T2600] ? do_mount+0x1436/0x2c40 [ 663.483771][ T2600] ? ksys_mount+0xdb/0x150 [ 663.488175][ T2600] ? parse_opts.part.0+0x94/0x330 [ 663.493193][ T2600] kstrdup+0x3a/0x70 [ 663.497086][ T2600] parse_opts.part.0+0x94/0x330 [ 663.501944][ T2600] ? p9_fd_show_options+0x1c0/0x1c0 [ 663.507146][ T2600] ? lock_downgrade+0x880/0x880 [ 663.512003][ T2600] ? trace_hardirqs_off+0x62/0x220 [ 663.517133][ T2600] p9_fd_create+0x9b/0x3a0 [ 663.521570][ T2600] ? parse_opts.part.0+0x330/0x330 [ 663.526708][ T2600] ? p9_client_create+0x82c/0x1400 [ 663.531833][ T2600] p9_client_create+0x89c/0x1400 [ 663.536781][ T2600] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 663.542599][ T2600] ? p9_client_zc_rpc.constprop.0+0x10c0/0x10c0 [ 663.548858][ T2600] ? rcu_read_lock_sched_held+0x110/0x130 [ 663.554580][ T2600] ? lockdep_init_map+0x1be/0x6d0 [ 663.559608][ T2600] v9fs_session_init+0x1e7/0x1960 [ 663.564625][ T2600] ? v9fs_session_init+0x1e7/0x1960 [ 663.569815][ T2600] ? find_held_lock+0x35/0x130 [ 663.574574][ T2600] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 663.580220][ T2600] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 663.586465][ T2600] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 663.592293][ T2600] ? v9fs_show_options+0x7e0/0x7e0 [ 663.597423][ T2600] ? v9fs_mount+0x5e/0x920 [ 663.601856][ T2600] ? rcu_read_lock_sched_held+0x110/0x130 [ 663.607583][ T2600] ? kmem_cache_alloc_trace+0x354/0x760 [ 663.613126][ T2600] ? legacy_init_fs_context+0x48/0xe0 [ 663.618508][ T2600] ? rcu_read_lock_sched_held+0x110/0x130 [ 663.624265][ T2600] v9fs_mount+0x7d/0x920 [ 663.628526][ T2600] ? v9fs_write_inode+0x70/0x70 [ 663.633366][ T2600] legacy_get_tree+0xf2/0x200 [ 663.638042][ T2600] vfs_get_tree+0x123/0x450 [ 663.642540][ T2600] do_mount+0x1436/0x2c40 [ 663.646880][ T2600] ? copy_mount_string+0x40/0x40 [ 663.651814][ T2600] ? _copy_from_user+0xdd/0x150 [ 663.656656][ T2600] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 663.662895][ T2600] ? copy_mount_options+0x280/0x3a0 [ 663.668100][ T2600] ksys_mount+0xdb/0x150 [ 663.672338][ T2600] __x64_sys_mount+0xbe/0x150 [ 663.677024][ T2600] do_syscall_64+0x103/0x610 [ 663.681630][ T2600] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 663.687509][ T2600] RIP: 0033:0x458079 [ 663.691406][ T2600] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 663.711000][ T2600] RSP: 002b:00007fcbd7c88c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 00:52:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:14 executing program 4: setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) clone(0x200000041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x18, &(0x7f0000000140)) ptrace(0x11, r0) ptrace$getsig(0x2, r0, 0xffffffffff600003, &(0x7f0000000000)) 00:52:14 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) socketpair(0x1b, 0x7, 0xf6, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000240)={'nat\x00'}, &(0x7f00000002c0)=0x54) ioctl$SIOCNRDECOBS(r1, 0x89e2) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000300)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f00000000c0)=""/131, &(0x7f0000000040)=0x83) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f00000001c0)={0x200}) socket$inet6(0xa, 0x800, 0x7) 00:52:14 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200026, 0x0, 0x0, 0x0) 00:52:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) [ 663.720288][ T2600] RAX: ffffffffffffffda RBX: 00007fcbd7c88c90 RCX: 0000000000458079 [ 663.728265][ T2600] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 663.736227][ T2600] RBP: 000000000073bf00 R08: 0000000020000280 R09: 0000000000000000 [ 663.744193][ T2600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbd7c896d4 [ 663.752156][ T2600] R13: 00000000004c3d9d R14: 00000000004d6fb8 R15: 0000000000000005 [ 663.761687][ T2600] 9pnet: Insufficient options for proto=fd 00:52:15 executing program 0 (fault-call:4 fault-nth:13): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 664.001120][ T2719] FAULT_INJECTION: forcing a failure. [ 664.001120][ T2719] name failslab, interval 1, probability 0, space 0, times 0 [ 664.039194][ T2719] CPU: 0 PID: 2719 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 00:52:15 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getpeername(r0, 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x10000) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@ipv4={[], [], @broadcast}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000840)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004900)={{{@in6=@local, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000004a00)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000004ac0)={0x11, 0x0, 0x0}, &(0x7f0000004b00)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000004b40)={@ipv4={[], [], @remote}, 0x0}, &(0x7f0000004b80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004bc0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000004cc0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000004d40)={@loopback, @multicast1, 0x0}, &(0x7f0000004d80)=0xc) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000004e80)={@dev, 0x0}, &(0x7f0000004ec0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000004f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004f40)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000004f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004fc0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000005000)={'bridge_slave_0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005040)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000005140)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005180)={{{@in=@initdev, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000005280)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000052c0)={'vcan0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f00000053c0)={@local, @remote, 0x0}, &(0x7f0000005400)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000005440)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000005540)=0xe8) getsockname(r0, &(0x7f0000005580)=@hci={0x1f, 0x0}, &(0x7f0000005600)=0x80) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000006740)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000006840)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000006e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x410}, 0xc, &(0x7f0000006dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20050000", @ANYRES16=r2, @ANYBLOB="200129bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="2c01020038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400050000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="3c00010024000000000000000000000000000000000000000000000800030006000000040004ff07000000", @ANYRES32=r5, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="06000000722d570c5146b1b058901334e408a099b07f666282b87d010c6ee75d4be960b9e5456cafcd40970c6db24e297f5a1827f5f645f94407de9b95c3bf7d1ba501364018681dca7fed9ccb11840df0a43f5394598d7b8e9915d3db99f796b9f2e06a6df6d9d8088d39f46beeb5520dfe634c9ec036578d728a9b26a208105c067c33a8e4bb7bee971b7a3828c3b0ae44e40974febf7addcf69eb54f234846e200eb5282ba6e3fa93465b6196112ee01a2385ecf2dd2d4277bc917e02a8417453716f9a33344022874c7a1412d5ad7b600b8e485ab2c436540105a2855500a6561743d00d40f2c1b5e5bbcf40e5a82044824f", @ANYRES32=r8, @ANYBLOB="640202003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400ffffffff40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r10, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000100000008000600", @ANYRES32=r13, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400ffffffff08000600", @ANYRES32=r14, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000800000008000600", @ANYRES32=r16, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r17, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB="640102007c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000004c000400040000ff050000000180812d01000000aaec0000040000000700080789360000090006810700000006000309010000000000ff00400000000800f9ff0101000008002001400000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r20, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000008000300030000000800040001800000"], 0x520}, 0x1, 0x0, 0x0, 0x2400c080}, 0x80) 00:52:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) [ 664.047827][ T2719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.057894][ T2719] Call Trace: [ 664.061226][ T2719] dump_stack+0x172/0x1f0 [ 664.065589][ T2719] should_fail.cold+0xa/0x15 [ 664.070208][ T2719] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 664.076126][ T2719] ? ___might_sleep+0x163/0x280 [ 664.081018][ T2719] __should_failslab+0x121/0x190 [ 664.085996][ T2719] should_failslab+0x9/0x14 [ 664.090522][ T2719] __kmalloc_track_caller+0x2d8/0x740 [ 664.095918][ T2719] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 664.102183][ T2719] ? match_number.isra.0+0x8d/0x190 [ 664.107404][ T2719] kmemdup_nul+0x31/0xa0 [ 664.111674][ T2719] match_number.isra.0+0x8d/0x190 [ 664.114476][ T2688] XFS (loop5): Invalid superblock magic number [ 664.116714][ T2719] ? match_strdup+0x80/0x80 [ 664.116733][ T2719] ? match_wildcard+0x320/0x320 [ 664.116746][ T2719] ? do_mount+0x1436/0x2c40 [ 664.116767][ T2719] match_int+0x5a/0x80 [ 664.141041][ T2719] parse_opts.part.0+0x207/0x330 [ 664.146012][ T2719] ? p9_fd_show_options+0x1c0/0x1c0 [ 664.151238][ T2719] ? lock_downgrade+0x880/0x880 [ 664.156107][ T2719] ? trace_hardirqs_off+0x62/0x220 [ 664.161258][ T2719] p9_fd_create+0x9b/0x3a0 [ 664.165723][ T2719] ? parse_opts.part.0+0x330/0x330 [ 664.170856][ T2719] ? p9_client_create+0x82c/0x1400 [ 664.176003][ T2719] p9_client_create+0x89c/0x1400 [ 664.180971][ T2719] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 664.186806][ T2719] ? p9_client_zc_rpc.constprop.0+0x10c0/0x10c0 [ 664.193080][ T2719] ? rcu_read_lock_sched_held+0x110/0x130 [ 664.198824][ T2719] ? lockdep_init_map+0x1be/0x6d0 [ 664.203873][ T2719] v9fs_session_init+0x1e7/0x1960 [ 664.208920][ T2719] ? v9fs_session_init+0x1e7/0x1960 [ 664.214166][ T2719] ? find_held_lock+0x35/0x130 [ 664.218997][ T2719] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 664.224646][ T2719] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 664.230907][ T2719] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 664.236739][ T2719] ? v9fs_show_options+0x7e0/0x7e0 [ 664.241874][ T2719] ? v9fs_mount+0x5e/0x920 [ 664.246312][ T2719] ? rcu_read_lock_sched_held+0x110/0x130 [ 664.252047][ T2719] ? kmem_cache_alloc_trace+0x354/0x760 [ 664.257606][ T2719] ? legacy_init_fs_context+0x48/0xe0 [ 664.263023][ T2719] ? rcu_read_lock_sched_held+0x110/0x130 [ 664.268778][ T2719] v9fs_mount+0x7d/0x920 [ 664.273046][ T2719] ? v9fs_write_inode+0x70/0x70 [ 664.277915][ T2719] legacy_get_tree+0xf2/0x200 [ 664.282623][ T2719] vfs_get_tree+0x123/0x450 [ 664.287173][ T2719] do_mount+0x1436/0x2c40 [ 664.291524][ T2719] ? copy_mount_string+0x40/0x40 00:52:15 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200027, 0x0, 0x0, 0x0) [ 664.296490][ T2719] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 664.302742][ T2719] ? copy_mount_options+0x280/0x3a0 [ 664.307989][ T2719] ksys_mount+0xdb/0x150 [ 664.312250][ T2719] __x64_sys_mount+0xbe/0x150 [ 664.316945][ T2719] do_syscall_64+0x103/0x610 [ 664.321578][ T2719] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 664.327478][ T2719] RIP: 0033:0x458079 [ 664.331389][ T2719] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:52:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) [ 664.351023][ T2719] RSP: 002b:00007fcbd7c88c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 664.359456][ T2719] RAX: ffffffffffffffda RBX: 00007fcbd7c88c90 RCX: 0000000000458079 [ 664.367440][ T2719] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 664.375422][ T2719] RBP: 000000000073bf00 R08: 0000000020000280 R09: 0000000000000000 [ 664.383404][ T2719] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbd7c896d4 [ 664.391391][ T2719] R13: 00000000004c3d9d R14: 00000000004d6fb8 R15: 0000000000000005 [ 664.400809][ T2719] 9pnet: Insufficient options for proto=fd 00:52:15 executing program 0 (fault-call:4 fault-nth:14): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:15 executing program 4: r0 = socket$inet6(0xa, 0xe, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000010000d06000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000012001000010065727370616e00000400020000000000000000"], 0x34}}, 0x0) [ 664.552154][ T2958] FAULT_INJECTION: forcing a failure. [ 664.552154][ T2958] name failslab, interval 1, probability 0, space 0, times 0 [ 664.567918][ T2958] CPU: 1 PID: 2958 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 664.576568][ T2958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.586642][ T2958] Call Trace: [ 664.589973][ T2958] dump_stack+0x172/0x1f0 [ 664.594343][ T2958] should_fail.cold+0xa/0x15 [ 664.598984][ T2958] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 664.604831][ T2958] ? ___might_sleep+0x163/0x280 [ 664.609721][ T2958] __should_failslab+0x121/0x190 [ 664.614696][ T2958] should_failslab+0x9/0x14 [ 664.619220][ T2958] __kmalloc_track_caller+0x2d8/0x740 [ 664.624613][ T2958] ? lockdep_hardirqs_on+0x418/0x5d0 [ 664.629924][ T2958] ? trace_hardirqs_on+0x67/0x230 [ 664.633371][ T2963] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 664.634986][ T2958] ? match_number.isra.0+0x8d/0x190 [ 664.635009][ T2958] kmemdup_nul+0x31/0xa0 [ 664.635026][ T2958] match_number.isra.0+0x8d/0x190 [ 664.635042][ T2958] ? match_strdup+0x80/0x80 [ 664.635058][ T2958] ? match_wildcard+0x320/0x320 [ 664.635082][ T2958] ? do_mount+0x1436/0x2c40 [ 664.672682][ T2958] match_int+0x5a/0x80 [ 664.676781][ T2958] parse_opts.part.0+0x207/0x330 [ 664.681745][ T2958] ? p9_fd_show_options+0x1c0/0x1c0 [ 664.686982][ T2958] ? lock_downgrade+0x880/0x880 [ 664.691868][ T2958] ? trace_hardirqs_off+0x62/0x220 [ 664.697018][ T2958] p9_fd_create+0x9b/0x3a0 [ 664.701443][ T2958] ? parse_opts.part.0+0x330/0x330 [ 664.706547][ T2958] ? p9_client_create+0x82c/0x1400 [ 664.714523][ T2958] p9_client_create+0x89c/0x1400 [ 664.719458][ T2958] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 664.725272][ T2958] ? p9_client_zc_rpc.constprop.0+0x10c0/0x10c0 [ 664.731520][ T2958] ? rcu_read_lock_sched_held+0x110/0x130 [ 664.737237][ T2958] ? lockdep_init_map+0x1be/0x6d0 [ 664.742265][ T2958] v9fs_session_init+0x1e7/0x1960 [ 664.747287][ T2958] ? v9fs_session_init+0x1e7/0x1960 [ 664.752483][ T2958] ? find_held_lock+0x35/0x130 [ 664.757244][ T2958] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 664.762895][ T2958] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 664.769155][ T2958] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 664.774988][ T2958] ? v9fs_show_options+0x7e0/0x7e0 [ 664.780097][ T2958] ? v9fs_mount+0x5e/0x920 [ 664.784533][ T2958] ? rcu_read_lock_sched_held+0x110/0x130 [ 664.790727][ T2958] ? kmem_cache_alloc_trace+0x354/0x760 [ 664.796488][ T2958] ? legacy_init_fs_context+0x48/0xe0 [ 664.801853][ T2958] ? rcu_read_lock_sched_held+0x110/0x130 [ 664.807605][ T2958] v9fs_mount+0x7d/0x920 [ 664.811858][ T2958] ? v9fs_write_inode+0x70/0x70 [ 664.816695][ T2958] legacy_get_tree+0xf2/0x200 [ 664.821387][ T2958] vfs_get_tree+0x123/0x450 [ 664.825885][ T2958] do_mount+0x1436/0x2c40 [ 664.830206][ T2958] ? copy_mount_string+0x40/0x40 [ 664.835151][ T2958] ? _copy_from_user+0xdd/0x150 [ 664.840011][ T2958] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 664.846254][ T2958] ? copy_mount_options+0x280/0x3a0 [ 664.851444][ T2958] ksys_mount+0xdb/0x150 [ 664.855711][ T2958] __x64_sys_mount+0xbe/0x150 [ 664.860429][ T2958] do_syscall_64+0x103/0x610 [ 664.865018][ T2958] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 664.870904][ T2958] RIP: 0033:0x458079 [ 664.874807][ T2958] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 664.894416][ T2958] RSP: 002b:00007fcbd7c88c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 664.902824][ T2958] RAX: ffffffffffffffda RBX: 00007fcbd7c88c90 RCX: 0000000000458079 [ 664.910806][ T2958] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 664.918769][ T2958] RBP: 000000000073bf00 R08: 0000000020000280 R09: 0000000000000000 [ 664.926754][ T2958] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbd7c896d4 [ 664.934727][ T2958] R13: 00000000004c3d9d R14: 00000000004d6fb8 R15: 0000000000000005 [ 664.963860][ T2958] 9pnet: Insufficient options for proto=fd 00:52:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:16 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x80000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0xe7d1b5a816569e58, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) unshare(0x8000401) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 00:52:16 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200028, 0x0, 0x0, 0x0) 00:52:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x3) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000080)={0x5f23aa5, 0x9}) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x7e}) 00:52:16 executing program 0 (fault-call:4 fault-nth:15): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:16 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xac9a, 0x20000) accept4$ax25(r0, &(0x7f00000000c0)={{0x3, @bcast}, [@bcast, @netrom, @bcast, @netrom, @bcast, @bcast, @rose]}, &(0x7f0000000040)=0xfe69, 0x80000) unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0xff, &(0x7f0000000240)="6cbd72e902eb201c7b9977cbf0f83d69072122e96ea43b037d3841c4928e60ce002fc984390f98a8711104c22c3286731d1882e8f6856b7395712da2c9f2d3265f1817f7f4e9df5b94495b52489153934c941da2b5758ba17f26297cbc1b604b1eb37ec08fcf8e75d1645929cee299039bbce96aa626c2d7d1c30c63d5748cddac08e2f6eaf60eb48ef01784dae59f0201050b884ffe4b58c316c3548b80ae661cf85130f2d35b5f6305f026447a406c01656a8a8a476d178190fd506bb31a032c4e5676f32c2b34c7a2b50a") ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@remote={[], 0x2}, 0xf, 'veth1_to_bond\x00'}) inotify_rm_watch(0xffffffffffffffff, 0x0) [ 665.375203][ T3112] FAULT_INJECTION: forcing a failure. [ 665.375203][ T3112] name failslab, interval 1, probability 0, space 0, times 0 [ 665.422065][ T3112] CPU: 0 PID: 3112 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 665.430701][ T3112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.440777][ T3112] Call Trace: [ 665.444095][ T3112] dump_stack+0x172/0x1f0 [ 665.448462][ T3112] should_fail.cold+0xa/0x15 [ 665.453080][ T3112] ? perf_trace_lock+0xeb/0x510 [ 665.457996][ T3112] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 665.463837][ T3112] ? ___might_sleep+0x163/0x280 [ 665.468712][ T3112] __should_failslab+0x121/0x190 [ 665.473700][ T3112] should_failslab+0x9/0x14 [ 665.478226][ T3112] kmem_cache_alloc+0x2b2/0x6f0 [ 665.483117][ T3112] ? kasan_check_write+0x14/0x20 [ 665.488094][ T3112] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 665.493931][ T3112] p9_client_prepare_req.part.0+0x3d/0x7a0 [ 665.499782][ T3112] ? trace_hardirqs_on+0x67/0x230 [ 665.504826][ T3112] ? kasan_check_read+0x11/0x20 [ 665.509700][ T3112] p9_client_rpc+0x21c/0x1230 [ 665.514402][ T3112] ? add_wait_queue+0x112/0x170 [ 665.519275][ T3112] ? p9_pollwait+0x76/0x210 [ 665.523828][ T3112] ? p9_client_destroy+0x360/0x360 [ 665.528969][ T3112] ? p9_conn_create+0x4f0/0x4f0 [ 665.533843][ T3112] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 665.540113][ T3112] ? pipe_poll+0x2c4/0x340 [ 665.544555][ T3112] ? generic_pipe_buf_confirm+0x10/0x10 [ 665.550140][ T3112] ? p9_fd_poll+0x1e7/0x2c0 [ 665.554664][ T3112] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 665.560960][ T3112] ? p9_conn_create+0x3ef/0x4f0 [ 665.565839][ T3112] ? p9_fd_create+0x277/0x3a0 00:52:16 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200029, 0x0, 0x0, 0x0) [ 665.570529][ T3112] ? parse_opts.part.0+0x330/0x330 [ 665.575667][ T3112] p9_client_create+0xb7d/0x1400 [ 665.580630][ T3112] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 665.586470][ T3112] ? p9_client_zc_rpc.constprop.0+0x10c0/0x10c0 [ 665.592738][ T3112] ? rcu_read_lock_sched_held+0x110/0x130 [ 665.598574][ T3112] ? lockdep_init_map+0x1be/0x6d0 [ 665.603636][ T3112] v9fs_session_init+0x1e7/0x1960 [ 665.608687][ T3112] ? v9fs_session_init+0x1e7/0x1960 [ 665.613902][ T3112] ? find_held_lock+0x35/0x130 [ 665.618691][ T3112] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 665.624356][ T3112] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 665.630627][ T3112] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 665.636460][ T3112] ? v9fs_show_options+0x7e0/0x7e0 [ 665.641595][ T3112] ? v9fs_mount+0x5e/0x920 [ 665.646025][ T3112] ? rcu_read_lock_sched_held+0x110/0x130 [ 665.651766][ T3112] ? kmem_cache_alloc_trace+0x354/0x760 [ 665.657334][ T3112] ? legacy_init_fs_context+0x48/0xe0 [ 665.662729][ T3112] ? rcu_read_lock_sched_held+0x110/0x130 [ 665.668473][ T3112] v9fs_mount+0x7d/0x920 [ 665.672747][ T3112] ? v9fs_write_inode+0x70/0x70 [ 665.677620][ T3112] legacy_get_tree+0xf2/0x200 [ 665.682323][ T3112] vfs_get_tree+0x123/0x450 [ 665.686881][ T3112] do_mount+0x1436/0x2c40 [ 665.691235][ T3112] ? copy_mount_string+0x40/0x40 [ 665.696201][ T3112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 665.702466][ T3112] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 665.708731][ T3112] ? copy_mount_options+0x280/0x3a0 [ 665.715427][ T3112] ksys_mount+0xdb/0x150 00:52:16 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x20002a, 0x0, 0x0, 0x0) [ 665.719693][ T3112] __x64_sys_mount+0xbe/0x150 [ 665.724386][ T3112] do_syscall_64+0x103/0x610 [ 665.729012][ T3112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 665.734911][ T3112] RIP: 0033:0x458079 [ 665.738039][ T3183] XFS (loop5): Invalid superblock magic number [ 665.738823][ T3112] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 665.738833][ T3112] RSP: 002b:00007fcbd7c88c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 00:52:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 00:52:16 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x40000000000031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f00006b1000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f00009fa000/0x4000)=nil) 00:52:16 executing program 2: unshare(0x4403fffc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) flistxattr(r0, &(0x7f0000000000)=""/122, 0x7a) inotify_rm_watch(0xffffffffffffffff, 0x0) [ 665.738849][ T3112] RAX: ffffffffffffffda RBX: 00007fcbd7c88c90 RCX: 0000000000458079 [ 665.738859][ T3112] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 665.738868][ T3112] RBP: 000000000073bf00 R08: 0000000020000280 R09: 0000000000000000 [ 665.738888][ T3112] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbd7c896d4 [ 665.805205][ T3112] R13: 00000000004c3d9d R14: 00000000004d6fb8 R15: 0000000000000005 00:52:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfsB', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xfb) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8948, &(0x7f00000000c0)={'bond0\x00'}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x200, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x40, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x80000, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x40, 0x0) r5 = memfd_create(&(0x7f00000001c0)='bond0\x00', 0x4) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x2000, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x2, 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000006000000", @ANYRES32=r2, @ANYBLOB="0000000000400000000000000000000100000000", @ANYRES32=r3, @ANYBLOB="00000000f4ffffff000040f0ffffffffd56d3e80000000000b4ac0c2856d6904d1e4a2a86dc9182792b4cc69bf697619592271a0359a108b9efdabce4469847628fbf75f53f111e36cb4a95a7ae083a87de38bb44291f9b2177f7598c8aa0aca579f10d1", @ANYRES32=r4, @ANYBLOB="0000000000000001010001000000000100000000", @ANYRES32=r5, @ANYBLOB="0000000000000000000001000040000101000000", @ANYRES32=r6, @ANYBLOB="00000000004000010000000000f0ffffffffffff", @ANYRES32=r7, @ANYBLOB="0000000000800000000000000020000000000000"]) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) 00:52:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 00:52:17 executing program 0 (fault-call:4 fault-nth:16): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:17 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$isdn_base(0x22, 0x3, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x83, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:17 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x20002b, 0x0, 0x0, 0x0) 00:52:17 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ftruncate(0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfed\xf8\x8a\xca\'\xb4\x03\x00\x00\x00\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xb3\xd4\x01\xbd]\x84\xf0\x87|)\x80', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0xffffffffffffc99e, 0x7, 0xffffffff, 0x2, r0}, 0x2c) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000080)={0x7, 0xe, 0x2b, "2424aeb388d54db8ee5683a0fefd0e9735671fb5056f5869d8d2b24abb980a3c224cd12e4b92aa6ee15cae99346c9e6eb59ac3a496ef3cbfcff7f470", 0xb, "552fb785b3a398330590bda6a9297186cd6fd686c2f9b97531b35c90bcab79e3af8ec848f6001bd7c86e6bc17209c082e102b3db4a60447e79d9e88c", 0x10}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x1ff, 0x8, 0x81, 0x11, r0, 0x4}, 0x2c) preadv(r0, &(0x7f0000000940), 0x0, 0x20001000) [ 666.536782][ T3388] FAULT_INJECTION: forcing a failure. [ 666.536782][ T3388] name failslab, interval 1, probability 0, space 0, times 0 00:52:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 00:52:17 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) [ 666.623724][ T3388] CPU: 1 PID: 3388 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 666.632357][ T3388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.642430][ T3388] Call Trace: [ 666.645782][ T3388] dump_stack+0x172/0x1f0 [ 666.645815][ T3388] should_fail.cold+0xa/0x15 [ 666.645835][ T3388] ? perf_trace_lock+0xeb/0x510 [ 666.645858][ T3388] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 666.645881][ T3388] ? ___might_sleep+0x163/0x280 [ 666.645910][ T3388] __should_failslab+0x121/0x190 [ 666.665465][ T3388] should_failslab+0x9/0x14 [ 666.665491][ T3388] kmem_cache_alloc+0x2b2/0x6f0 [ 666.665509][ T3388] ? kasan_check_write+0x14/0x20 [ 666.665533][ T3388] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 666.695787][ T3388] p9_client_prepare_req.part.0+0x3d/0x7a0 [ 666.701617][ T3388] ? trace_hardirqs_on+0x67/0x230 [ 666.709237][ T3388] ? kasan_check_read+0x11/0x20 [ 666.714118][ T3388] p9_client_rpc+0x21c/0x1230 [ 666.718828][ T3388] ? add_wait_queue+0x112/0x170 [ 666.723711][ T3388] ? p9_pollwait+0x76/0x210 [ 666.728234][ T3388] ? p9_client_destroy+0x360/0x360 [ 666.733359][ T3388] ? p9_conn_create+0x4f0/0x4f0 [ 666.738221][ T3388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 666.744493][ T3388] ? pipe_poll+0x2c4/0x340 [ 666.748932][ T3388] ? generic_pipe_buf_confirm+0x10/0x10 [ 666.754511][ T3388] ? p9_fd_poll+0x1e7/0x2c0 [ 666.759029][ T3388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 666.765286][ T3388] ? p9_conn_create+0x3ef/0x4f0 [ 666.770153][ T3388] ? p9_fd_create+0x277/0x3a0 [ 666.774839][ T3388] ? parse_opts.part.0+0x330/0x330 [ 666.779982][ T3388] p9_client_create+0xb7d/0x1400 [ 666.785074][ T3388] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 666.791446][ T3388] ? p9_client_zc_rpc.constprop.0+0x10c0/0x10c0 [ 666.797936][ T3388] ? rcu_read_lock_sched_held+0x110/0x130 [ 666.803701][ T3388] ? lockdep_init_map+0x1be/0x6d0 [ 666.808767][ T3388] v9fs_session_init+0x1e7/0x1960 [ 666.813811][ T3388] ? v9fs_session_init+0x1e7/0x1960 [ 666.820034][ T3388] ? find_held_lock+0x35/0x130 [ 666.824820][ T3388] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 666.830469][ T3388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 666.836741][ T3388] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 666.842571][ T3388] ? v9fs_show_options+0x7e0/0x7e0 [ 666.847707][ T3388] ? v9fs_mount+0x5e/0x920 [ 666.852169][ T3388] ? rcu_read_lock_sched_held+0x110/0x130 [ 666.857909][ T3388] ? kmem_cache_alloc_trace+0x354/0x760 [ 666.863492][ T3388] ? legacy_init_fs_context+0x48/0xe0 [ 666.868886][ T3388] ? rcu_read_lock_sched_held+0x110/0x130 [ 666.874634][ T3388] v9fs_mount+0x7d/0x920 [ 666.878912][ T3388] ? v9fs_write_inode+0x70/0x70 [ 666.883791][ T3388] legacy_get_tree+0xf2/0x200 [ 666.888496][ T3388] vfs_get_tree+0x123/0x450 [ 666.893041][ T3388] do_mount+0x1436/0x2c40 [ 666.897391][ T3388] ? copy_mount_string+0x40/0x40 [ 666.902346][ T3388] ? _copy_from_user+0xdd/0x150 [ 666.907213][ T3388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 666.913473][ T3388] ? copy_mount_options+0x280/0x3a0 [ 666.918705][ T3388] ksys_mount+0xdb/0x150 [ 666.922977][ T3388] __x64_sys_mount+0xbe/0x150 [ 666.927674][ T3388] do_syscall_64+0x103/0x610 [ 666.932303][ T3388] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 666.938199][ T3388] RIP: 0033:0x458079 [ 666.942105][ T3388] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 666.961720][ T3388] RSP: 002b:00007fcbd7c88c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 00:52:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) [ 666.970152][ T3388] RAX: ffffffffffffffda RBX: 00007fcbd7c88c90 RCX: 0000000000458079 [ 666.978168][ T3388] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 666.986178][ T3388] RBP: 000000000073bf00 R08: 0000000020000280 R09: 0000000000000000 [ 666.994168][ T3388] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbd7c896d4 [ 667.002148][ T3388] R13: 00000000004c3d9d R14: 00000000004d6fb8 R15: 0000000000000005 00:52:18 executing program 0 (fault-call:4 fault-nth:17): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, 0x0, 0x0) pwritev(r0, &(0x7f0000000800)=[{&(0x7f0000000040)="067980b51b7e5ce3fa5b1b56bc3ce6b427ec9daf0c075235fca5ff2d1aa9233d7647e6cc752b81c8fed3497e4cdc7b6f698432354bd18ce38170aa0d3c45008978052650f0dfd8a7e269362c8b159f54b72b1af09e0054bf61132404bf918b26d1d4527ace5e08", 0x67}, {&(0x7f00000000c0)="170aba5f2f46a3d61822c0c342fc8d1abbc2d3b9ebb6bcd21d088f840e2a23f04e05c755b0be0c8e6c21949169184022e76846b5c879bbb02b3f6fea033228ee765674fde3b9759d6b04f1b10dc8c57540bc3298e80e3df9d75fc53291966c851e847a9ccee4671a418d0d953cdf", 0x6e}, {&(0x7f0000000380)="43fd20feaa904e627b0c83a40f6d8075ab0db03797e24ea08ac48c8733320029946af2bded27fffba301b33ac6de6055050eb13de3f3babb11afcd96db599223c560869385c5f817624f25bc27aab3e743fe365b59c95ad699221b0d0f272cea3a8275c00e82dbcb220e661702fa6469e3c0d18a18e2a264660667cea60c994ad1c53d69c47965dfa3c5ecb94315e4b32202ce29c08df18958e926c7e108aab9d2a3c59c5192740564b46a3123593cb3ef2e7228a0518076b3f7cc43dd21186120afd7784bd513d291b540e799d0c5d68b017aba5936625a54b0f5b77209afb06f10ea2f96150659167dd5609b910e6b41d809", 0xf3}, {&(0x7f0000000140)}, {&(0x7f0000000480)="204813944947cf7fc8f816a8cdf4ed2807b8ab5ee76cc4a47f5dba5b845bd53de598dcc2450c9023347fcf0eb0205e7db3aa0cedf98e544f34995a4a86063afeb1a31956f1f54429e9939314c6a2280541437330482f263ef22574387a78ec7374abc6d4deec4b7e2173a809c3ba0fd88258a23ef4521266d074a560b634cb9cf0219c1ddd1fef72a2c038919262577fe5624bc80127ef060dabf191b01615ebaa1821b6e81512cecc250c9f0873beff836befc6b4522805ae1f3505d6c5aa5035414eb2940449f0352ffba0a677d06693d07325475744ed364f2b3076ef0370", 0xe0}, {&(0x7f0000000180)}, {&(0x7f0000000700)="c9961c8ca18b2d89dc28b3b92bafe121ba6bcf4030d26d2e291ad9bfd2eeb54dd03ffbc3c01e289606fb642f723784984d97d479b622373a1681ba71d1ec80cfd50b5a48d6760baf9b4527e9cb05b0bc630521173944ac1c244f2ec073d2623a4a87e71ca797445d660030433a86db1079bec6b778fb2e072f369b7e22d98d3b72235ef1d00487ddf4f9f719bb34545498582f590a8b586344d4640a8bd43f1de77c588e61cd60b2d7cd4f2ae87b7e3224fd23dfa42b4c4d73064c7c3ea55a25ed4f8da031b789c87865116740cb69d0581004277ed6fade0de01a917b16f29f8daa7a6f2db8e1a2e7b9b74d444917fde709c1c0", 0xf4}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000000280)="fc9de2f642eaa6d485eab6e155bfab9347127c45c72adff84d69918c9908a44e0283b6a97e81626ea9300730a8ad13744fc6333417f75ef6b05d1115f372338f9c413adc92be6797711e6311014831998b79121fd8972b5d8262435c73ce8eda91856a79a4309d2ec57461e434db292a77e5784b11a4d159d9a668356f9ef6a4bd239bb10e437d4c92eee73d8f25890c1ff9ba3dfd4aeb06a075968b82", 0x9d}], 0x9, 0x21) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000340)=0x1, 0x4) 00:52:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) [ 667.267263][ T3526] FAULT_INJECTION: forcing a failure. [ 667.267263][ T3526] name failslab, interval 1, probability 0, space 0, times 0 [ 667.286215][ T3526] CPU: 1 PID: 3526 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 667.294832][ T3526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 667.294840][ T3526] Call Trace: [ 667.294869][ T3526] dump_stack+0x172/0x1f0 [ 667.294896][ T3526] should_fail.cold+0xa/0x15 [ 667.294920][ T3526] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 667.294948][ T3526] ? ___might_sleep+0x163/0x280 [ 667.323058][ T3526] __should_failslab+0x121/0x190 [ 667.323078][ T3526] should_failslab+0x9/0x14 [ 667.323094][ T3526] __kmalloc+0x2dc/0x740 [ 667.323110][ T3526] ? p9_client_prepare_req.part.0+0x3d/0x7a0 [ 667.323136][ T3526] ? rcu_read_lock_sched_held+0x110/0x130 [ 667.353370][ T3526] ? p9_fcall_init.isra.0+0x6d/0x1d0 [ 667.358672][ T3526] p9_fcall_init.isra.0+0x6d/0x1d0 [ 667.363795][ T3526] p9_client_prepare_req.part.0+0xa3/0x7a0 [ 667.369630][ T3526] p9_client_rpc+0x21c/0x1230 [ 667.374413][ T3526] ? add_wait_queue+0x112/0x170 [ 667.379290][ T3526] ? p9_pollwait+0x76/0x210 [ 667.383814][ T3526] ? p9_client_destroy+0x360/0x360 [ 667.388965][ T3526] ? p9_conn_create+0x4f0/0x4f0 [ 667.393859][ T3526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 667.400131][ T3526] ? pipe_poll+0x2c4/0x340 [ 667.404570][ T3526] ? generic_pipe_buf_confirm+0x10/0x10 [ 667.410131][ T3526] ? p9_fd_poll+0x1e7/0x2c0 [ 667.414651][ T3526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 667.420902][ T3526] ? p9_conn_create+0x3ef/0x4f0 [ 667.425777][ T3526] ? p9_fd_create+0x277/0x3a0 [ 667.430466][ T3526] ? parse_opts.part.0+0x330/0x330 [ 667.435599][ T3526] p9_client_create+0xb7d/0x1400 [ 667.440548][ T3526] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 667.446383][ T3526] ? p9_client_zc_rpc.constprop.0+0x10c0/0x10c0 [ 667.452636][ T3526] ? rcu_read_lock_sched_held+0x110/0x130 [ 667.458371][ T3526] ? lockdep_init_map+0x1be/0x6d0 [ 667.463414][ T3526] v9fs_session_init+0x1e7/0x1960 [ 667.468485][ T3526] ? v9fs_session_init+0x1e7/0x1960 [ 667.473692][ T3526] ? find_held_lock+0x35/0x130 [ 667.478470][ T3526] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 667.484119][ T3526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 667.490404][ T3526] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 667.496230][ T3526] ? v9fs_show_options+0x7e0/0x7e0 [ 667.501358][ T3526] ? v9fs_mount+0x5e/0x920 [ 667.505795][ T3526] ? rcu_read_lock_sched_held+0x110/0x130 [ 667.511539][ T3526] ? kmem_cache_alloc_trace+0x354/0x760 [ 667.517102][ T3526] ? legacy_init_fs_context+0x48/0xe0 [ 667.522501][ T3526] ? rcu_read_lock_sched_held+0x110/0x130 [ 667.528251][ T3526] v9fs_mount+0x7d/0x920 [ 667.532522][ T3526] ? v9fs_write_inode+0x70/0x70 [ 667.537392][ T3526] legacy_get_tree+0xf2/0x200 [ 667.542109][ T3526] vfs_get_tree+0x123/0x450 [ 667.546638][ T3526] do_mount+0x1436/0x2c40 [ 667.550996][ T3526] ? copy_mount_string+0x40/0x40 [ 667.555947][ T3526] ? _copy_from_user+0xdd/0x150 [ 667.560826][ T3526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 667.567093][ T3526] ? copy_mount_options+0x280/0x3a0 [ 667.572311][ T3526] ksys_mount+0xdb/0x150 [ 667.576584][ T3526] __x64_sys_mount+0xbe/0x150 [ 667.581280][ T3526] do_syscall_64+0x103/0x610 [ 667.585890][ T3526] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 667.591795][ T3526] RIP: 0033:0x458079 [ 667.595702][ T3526] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:52:18 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x20002c, 0x0, 0x0, 0x0) [ 667.615434][ T3526] RSP: 002b:00007fcbd7c88c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 667.623865][ T3526] RAX: ffffffffffffffda RBX: 00007fcbd7c88c90 RCX: 0000000000458079 [ 667.631851][ T3526] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 667.639842][ T3526] RBP: 000000000073bf00 R08: 0000000020000280 R09: 0000000000000000 [ 667.647836][ T3526] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbd7c896d4 [ 667.655829][ T3526] R13: 00000000004c3d9d R14: 00000000004d6fb8 R15: 0000000000000005 00:52:18 executing program 0 (fault-call:4 fault-nth:18): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x3e0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_mr_cache\x00') preadv(r1, &(0x7f00000025c0)=[{&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000080)=""/232, 0xe8}, {&(0x7f0000000200)=""/4, 0x4}, {&(0x7f0000000240)=""/80, 0x50}, {&(0x7f00000002c0)=""/249, 0xf9}, {&(0x7f0000002680)=""/16, 0x10}, {&(0x7f0000002400)=""/123, 0x7b}, {&(0x7f0000002480)=""/123, 0x7b}, {&(0x7f0000002500)=""/139, 0x8b}], 0xa, 0x4000) [ 667.905872][ T3646] FAULT_INJECTION: forcing a failure. [ 667.905872][ T3646] name failslab, interval 1, probability 0, space 0, times 0 [ 667.921629][ T3636] XFS (loop5): Invalid superblock magic number [ 667.954757][ T3646] CPU: 1 PID: 3646 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 667.963391][ T3646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 667.973459][ T3646] Call Trace: [ 667.976790][ T3646] dump_stack+0x172/0x1f0 [ 667.981147][ T3646] should_fail.cold+0xa/0x15 [ 667.981173][ T3646] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 667.981205][ T3646] ? ___might_sleep+0x163/0x280 [ 667.981229][ T3646] __should_failslab+0x121/0x190 [ 667.981255][ T3646] should_failslab+0x9/0x14 [ 667.996497][ T3646] __kmalloc+0x2dc/0x740 [ 667.996521][ T3646] ? p9_fcall_init.isra.0+0x6d/0x1d0 [ 667.996539][ T3646] p9_fcall_init.isra.0+0x6d/0x1d0 [ 667.996558][ T3646] p9_client_prepare_req.part.0+0x142/0x7a0 [ 667.996582][ T3646] p9_client_rpc+0x21c/0x1230 [ 667.996597][ T3646] ? add_wait_queue+0x112/0x170 [ 667.996616][ T3646] ? p9_pollwait+0x76/0x210 [ 667.996631][ T3646] ? p9_client_destroy+0x360/0x360 [ 667.996646][ T3646] ? p9_conn_create+0x4f0/0x4f0 [ 667.996669][ T3646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 668.056872][ T3646] ? pipe_poll+0x2c4/0x340 [ 668.061316][ T3646] ? generic_pipe_buf_confirm+0x10/0x10 [ 668.066885][ T3646] ? p9_fd_poll+0x1e7/0x2c0 [ 668.071416][ T3646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 668.077668][ T3646] ? p9_conn_create+0x3ef/0x4f0 [ 668.082548][ T3646] ? p9_fd_create+0x277/0x3a0 [ 668.087248][ T3646] ? parse_opts.part.0+0x330/0x330 [ 668.092380][ T3646] p9_client_create+0xb7d/0x1400 [ 668.097332][ T3646] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 668.103162][ T3646] ? p9_client_zc_rpc.constprop.0+0x10c0/0x10c0 [ 668.109448][ T3646] ? rcu_read_lock_sched_held+0x110/0x130 [ 668.115207][ T3646] ? lockdep_init_map+0x1be/0x6d0 [ 668.120258][ T3646] v9fs_session_init+0x1e7/0x1960 [ 668.125301][ T3646] ? v9fs_session_init+0x1e7/0x1960 [ 668.130515][ T3646] ? find_held_lock+0x35/0x130 [ 668.135301][ T3646] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 668.140948][ T3646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 668.147221][ T3646] ? fault_create_debugfs_attr+0x1e0/0x1e0 00:52:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) [ 668.153045][ T3646] ? v9fs_show_options+0x7e0/0x7e0 [ 668.158184][ T3646] ? v9fs_mount+0x5e/0x920 [ 668.162625][ T3646] ? rcu_read_lock_sched_held+0x110/0x130 [ 668.168374][ T3646] ? kmem_cache_alloc_trace+0x354/0x760 [ 668.173939][ T3646] ? legacy_init_fs_context+0x48/0xe0 [ 668.179496][ T3646] ? rcu_read_lock_sched_held+0x110/0x130 [ 668.185254][ T3646] v9fs_mount+0x7d/0x920 [ 668.189527][ T3646] ? v9fs_write_inode+0x70/0x70 [ 668.194399][ T3646] legacy_get_tree+0xf2/0x200 [ 668.199094][ T3646] vfs_get_tree+0x123/0x450 00:52:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) [ 668.203624][ T3646] do_mount+0x1436/0x2c40 [ 668.207994][ T3646] ? copy_mount_string+0x40/0x40 [ 668.212967][ T3646] ? copy_mount_options+0x198/0x3a0 [ 668.218189][ T3646] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 668.223765][ T3646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 668.230031][ T3646] ? copy_mount_options+0x280/0x3a0 [ 668.235255][ T3646] ksys_mount+0xdb/0x150 [ 668.239528][ T3646] __x64_sys_mount+0xbe/0x150 [ 668.244230][ T3646] do_syscall_64+0x103/0x610 [ 668.248847][ T3646] entry_SYSCALL_64_after_hwframe+0x49/0xbe 00:52:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) [ 668.254756][ T3646] RIP: 0033:0x458079 [ 668.258687][ T3646] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 668.278495][ T3646] RSP: 002b:00007fcbd7c88c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 668.286929][ T3646] RAX: ffffffffffffffda RBX: 00007fcbd7c88c90 RCX: 0000000000458079 [ 668.294931][ T3646] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 668.302934][ T3646] RBP: 000000000073bf00 R08: 0000000020000280 R09: 0000000000000000 [ 668.310932][ T3646] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbd7c896d4 [ 668.318941][ T3646] R13: 00000000004c3d9d R14: 00000000004d6fb8 R15: 0000000000000005 00:52:19 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20400) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xbfe, 0x1, 0x0, 0x0, 0xd, 0x0, "6257ad13915e8a7684358921715630a0ee545a44afad71508a115b1769fa40acd192da9e73b9f19c933625ded68c2acf3ac36d697e135a8c4e10db9208198805", "ae82cccab8bdc5fb455f7f305bd099b1f4331ee1fc332656efc4f6a4bbe88fad0a39e626ce879cb3d299e2ff6164b19ae68e8214037ae04e750c89800247f635", "de5816b5d65dfcb6a1abe618cfe43ff973d9d307099ac30c2e64726587712b4e", [0x3, 0x2]}) 00:52:19 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x20002d, 0x0, 0x0, 0x0) 00:52:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 00:52:19 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xff) setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000040)=0x7, 0x4) 00:52:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:19 executing program 0 (fault-call:4 fault-nth:19): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x8, 0x0, &(0x7f0000000040)) 00:52:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) [ 668.934785][ T3893] FAULT_INJECTION: forcing a failure. [ 668.934785][ T3893] name failslab, interval 1, probability 0, space 0, times 0 [ 668.948080][ T3893] CPU: 1 PID: 3893 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 668.956704][ T3893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 668.966784][ T3893] Call Trace: [ 668.970132][ T3893] dump_stack+0x172/0x1f0 [ 668.974511][ T3893] should_fail.cold+0xa/0x15 [ 668.979156][ T3893] ? __save_stack_trace+0x8a/0xf0 [ 668.984218][ T3893] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 668.990079][ T3893] __should_failslab+0x121/0x190 [ 668.995052][ T3893] should_failslab+0x9/0x14 [ 668.999575][ T3893] kmem_cache_alloc+0x47/0x6f0 [ 669.004349][ T3893] ? p9_client_rpc+0x21c/0x1230 [ 669.009205][ T3893] ? p9_client_create+0xb7d/0x1400 [ 669.014332][ T3893] ? v9fs_session_init+0x1e7/0x1960 [ 669.019573][ T3893] ? v9fs_mount+0x7d/0x920 [ 669.024010][ T3893] ? legacy_get_tree+0xf2/0x200 [ 669.028891][ T3893] ? vfs_get_tree+0x123/0x450 [ 669.033587][ T3893] ? do_mount+0x1436/0x2c40 [ 669.038111][ T3893] radix_tree_node_alloc.constprop.0+0x1eb/0x340 [ 669.044484][ T3893] idr_get_free+0x425/0x8d0 [ 669.049026][ T3893] idr_alloc_u32+0x19e/0x330 [ 669.053643][ T3893] ? __fprop_inc_percpu_max+0x230/0x230 [ 669.059246][ T3893] idr_alloc+0xe5/0x150 [ 669.063425][ T3893] ? idr_alloc_u32+0x330/0x330 [ 669.068219][ T3893] p9_client_prepare_req.part.0+0x4e5/0x7a0 [ 669.074142][ T3893] p9_client_rpc+0x21c/0x1230 [ 669.078845][ T3893] ? add_wait_queue+0x112/0x170 00:52:20 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x20002e, 0x0, 0x0, 0x0) [ 669.083719][ T3893] ? p9_pollwait+0x76/0x210 [ 669.088238][ T3893] ? p9_client_destroy+0x360/0x360 [ 669.093369][ T3893] ? p9_conn_create+0x4f0/0x4f0 [ 669.098245][ T3893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 669.104509][ T3893] ? pipe_poll+0x2c4/0x340 [ 669.108946][ T3893] ? generic_pipe_buf_confirm+0x10/0x10 [ 669.114535][ T3893] ? p9_fd_poll+0x1e7/0x2c0 [ 669.119079][ T3893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 669.125346][ T3893] ? p9_conn_create+0x3ef/0x4f0 [ 669.130226][ T3893] ? p9_fd_create+0x277/0x3a0 [ 669.134927][ T3893] ? parse_opts.part.0+0x330/0x330 [ 669.140075][ T3893] p9_client_create+0xb7d/0x1400 [ 669.145035][ T3893] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 669.150883][ T3893] ? p9_client_zc_rpc.constprop.0+0x10c0/0x10c0 [ 669.157326][ T3893] ? rcu_read_lock_sched_held+0x110/0x130 [ 669.163087][ T3893] ? lockdep_init_map+0x1be/0x6d0 [ 669.168142][ T3893] v9fs_session_init+0x1e7/0x1960 [ 669.173203][ T3893] ? v9fs_session_init+0x1e7/0x1960 [ 669.178424][ T3893] ? find_held_lock+0x35/0x130 [ 669.183241][ T3893] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 669.188894][ T3893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 669.195168][ T3893] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 669.201012][ T3893] ? v9fs_show_options+0x7e0/0x7e0 [ 669.206153][ T3893] ? v9fs_mount+0x5e/0x920 [ 669.210587][ T3893] ? rcu_read_lock_sched_held+0x110/0x130 [ 669.216332][ T3893] ? kmem_cache_alloc_trace+0x354/0x760 [ 669.221899][ T3893] ? legacy_init_fs_context+0x48/0xe0 [ 669.227291][ T3893] ? rcu_read_lock_sched_held+0x110/0x130 [ 669.233041][ T3893] v9fs_mount+0x7d/0x920 [ 669.237315][ T3893] ? v9fs_write_inode+0x70/0x70 [ 669.242188][ T3893] legacy_get_tree+0xf2/0x200 [ 669.246888][ T3893] vfs_get_tree+0x123/0x450 [ 669.251420][ T3893] do_mount+0x1436/0x2c40 [ 669.255775][ T3893] ? copy_mount_string+0x40/0x40 [ 669.260725][ T3893] ? _copy_from_user+0xdd/0x150 [ 669.265598][ T3893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 669.271857][ T3893] ? copy_mount_options+0x280/0x3a0 [ 669.277092][ T3893] ksys_mount+0xdb/0x150 [ 669.281350][ T3893] __x64_sys_mount+0xbe/0x150 [ 669.286416][ T3893] do_syscall_64+0x103/0x610 [ 669.291028][ T3893] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 669.296935][ T3893] RIP: 0033:0x458079 [ 669.300857][ T3893] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 669.320489][ T3893] RSP: 002b:00007fcbd7c88c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 669.328920][ T3893] RAX: ffffffffffffffda RBX: 00007fcbd7c88c90 RCX: 0000000000458079 00:52:20 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x20002f, 0x0, 0x0, 0x0) [ 669.336918][ T3893] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 669.344913][ T3893] RBP: 000000000073bf00 R08: 0000000020000280 R09: 0000000000000000 [ 669.352904][ T3893] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbd7c896d4 [ 669.360885][ T3893] R13: 00000000004c3d9d R14: 00000000004d6fb8 R15: 0000000000000005 00:52:20 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x2002) 00:52:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) [ 669.483011][ T3894] XFS (loop5): Invalid superblock magic number 00:52:20 executing program 2: unshare(0x30000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="62747266732e656d3025006c2fd19e51c53885f7b6d9acb2005b23b21dc219532cd7e7e1d120157dd600ca0ebd6e3e8f1ca63889b67e36eb046c5552f537501f9085fc4f02a1fed0d03ef29f383957f2d17dfe283c94d2355088676bccbac2d083955eca881fe65d057fb4cc47192c7786e19852041fed80d34eb42693cfed073d5ce05016e2f5afea52419c182fc836c56938b5b4c9e9ab3f152c"], &(0x7f00000000c0)='md5sumvboxnet0\x00', 0xf, 0x1) dup(r0) 00:52:20 executing program 0 (fault-call:4 fault-nth:20): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x20000, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000180)={0xfff, 0x80, 0x1, 0x0, 0x11, 0x6, 0x0, 0x71d, 0x7f, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x410200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = dup3(r2, r0, 0x80000) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0xee6, 'syz1\x00', @bcast, 0xffff, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth0_to_bridge\x00', 0x10) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f0000000000)={0x7b, 0x600000000000000, [0x40000084], [0xc2]}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000200)=""/243) 00:52:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) [ 669.839300][ T4035] FAULT_INJECTION: forcing a failure. [ 669.839300][ T4035] name failslab, interval 1, probability 0, space 0, times 0 [ 669.851942][ T4035] CPU: 0 PID: 4035 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 669.860561][ T4035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.870628][ T4035] Call Trace: [ 669.873961][ T4035] dump_stack+0x172/0x1f0 [ 669.878362][ T4035] should_fail.cold+0xa/0x15 [ 669.882983][ T4035] ? __save_stack_trace+0x8a/0xf0 [ 669.888031][ T4035] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 669.893863][ T4035] __should_failslab+0x121/0x190 [ 669.898821][ T4035] should_failslab+0x9/0x14 [ 669.903339][ T4035] kmem_cache_alloc+0x47/0x6f0 [ 669.908115][ T4035] ? p9_client_rpc+0x21c/0x1230 [ 669.912988][ T4035] ? p9_client_create+0xb7d/0x1400 [ 669.918115][ T4035] ? v9fs_session_init+0x1e7/0x1960 [ 669.923320][ T4035] ? v9fs_mount+0x7d/0x920 [ 669.927742][ T4035] ? legacy_get_tree+0xf2/0x200 [ 669.932606][ T4035] ? vfs_get_tree+0x123/0x450 [ 669.937302][ T4035] ? do_mount+0x1436/0x2c40 [ 669.941841][ T4035] radix_tree_node_alloc.constprop.0+0x1eb/0x340 [ 669.948202][ T4035] idr_get_free+0x425/0x8d0 [ 669.952737][ T4035] idr_alloc_u32+0x19e/0x330 [ 669.957348][ T4035] ? __fprop_inc_percpu_max+0x230/0x230 [ 669.962926][ T4035] idr_alloc+0xe5/0x150 [ 669.967111][ T4035] ? idr_alloc_u32+0x330/0x330 [ 669.971898][ T4035] p9_client_prepare_req.part.0+0x4e5/0x7a0 [ 669.977818][ T4035] p9_client_rpc+0x21c/0x1230 [ 669.982598][ T4035] ? add_wait_queue+0x112/0x170 [ 669.987465][ T4035] ? p9_pollwait+0x76/0x210 [ 669.991998][ T4035] ? p9_client_destroy+0x360/0x360 [ 669.997124][ T4035] ? p9_conn_create+0x4f0/0x4f0 [ 670.002019][ T4035] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 670.008273][ T4035] ? pipe_poll+0x2c4/0x340 [ 670.012700][ T4035] ? generic_pipe_buf_confirm+0x10/0x10 [ 670.018256][ T4035] ? p9_fd_poll+0x1e7/0x2c0 [ 670.022770][ T4035] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 670.029038][ T4035] ? p9_conn_create+0x3ef/0x4f0 [ 670.033918][ T4035] ? p9_fd_create+0x277/0x3a0 [ 670.038624][ T4035] ? parse_opts.part.0+0x330/0x330 [ 670.043749][ T4035] p9_client_create+0xb7d/0x1400 [ 670.048695][ T4035] ? retint_kernel+0x2d/0x2d [ 670.053305][ T4035] ? p9_client_zc_rpc.constprop.0+0x10c0/0x10c0 [ 670.059582][ T4035] v9fs_session_init+0x1e7/0x1960 [ 670.064624][ T4035] ? v9fs_session_init+0x1e7/0x1960 [ 670.069837][ T4035] ? find_held_lock+0x35/0x130 [ 670.074620][ T4035] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 670.080267][ T4035] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 670.086538][ T4035] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 670.092457][ T4035] ? v9fs_show_options+0x7e0/0x7e0 [ 670.097585][ T4035] ? v9fs_mount+0x5e/0x920 [ 670.102012][ T4035] ? rcu_read_lock_sched_held+0x110/0x130 [ 670.107744][ T4035] ? kmem_cache_alloc_trace+0x354/0x760 [ 670.113294][ T4035] ? legacy_init_fs_context+0x48/0xe0 [ 670.118760][ T4035] ? rcu_read_lock_sched_held+0x110/0x130 [ 670.124504][ T4035] v9fs_mount+0x7d/0x920 [ 670.128766][ T4035] ? v9fs_write_inode+0x70/0x70 [ 670.133622][ T4035] legacy_get_tree+0xf2/0x200 [ 670.138314][ T4035] vfs_get_tree+0x123/0x450 [ 670.143180][ T4035] do_mount+0x1436/0x2c40 [ 670.147532][ T4035] ? copy_mount_string+0x40/0x40 [ 670.152481][ T4035] ? audit_add_tree_rule.cold+0x37/0x37 [ 670.158056][ T4035] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 670.164325][ T4035] ? copy_mount_options+0x280/0x3a0 [ 670.169549][ T4035] ksys_mount+0xdb/0x150 [ 670.173805][ T4035] __x64_sys_mount+0xbe/0x150 [ 670.178499][ T4035] do_syscall_64+0x103/0x610 [ 670.183099][ T4035] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 670.189015][ T4035] RIP: 0033:0x458079 [ 670.192922][ T4035] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 670.212659][ T4035] RSP: 002b:00007fcbd7c88c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 670.221090][ T4035] RAX: ffffffffffffffda RBX: 00007fcbd7c88c90 RCX: 0000000000458079 [ 670.229162][ T4035] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 670.237153][ T4035] RBP: 000000000073bf00 R08: 0000000020000280 R09: 0000000000000000 [ 670.245139][ T4035] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbd7c896d4 [ 670.253125][ T4035] R13: 00000000004c3d9d R14: 00000000004d6fb8 R15: 0000000000000005 00:52:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:21 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200030, 0x0, 0x0, 0x0) 00:52:21 executing program 4: getrandom(&(0x7f0000000080)=""/44, 0x8dcdbde73f1fed1, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x908, 0x20000) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000002c0), &(0x7f0000000300)=0x4) socketpair$unix(0x1, 0x200000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000240)=0x16, 0x4) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4008}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipmr_delroute={0x24, 0x19, 0x200, 0x70bd26, 0x25dfdbfe, {0x80, 0x0, 0x10, 0xffffffffffffffe1, 0xfe, 0x3, 0xff, 0xb, 0xc00}, [@RTA_MARK={0x8, 0x10, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) r3 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000200), 0x4) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x2}]]}}}]}, 0x38}}, 0x0) 00:52:21 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x28080, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 00:52:21 executing program 0 (fault-call:4 fault-nth:21): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 00:52:21 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)='\')em1\x00', 0x6, 0x3) [ 670.618275][ T4150] XFS (loop5): Invalid superblock magic number [ 670.741861][ T4273] FAULT_INJECTION: forcing a failure. [ 670.741861][ T4273] name failslab, interval 1, probability 0, space 0, times 0 [ 670.754498][ T4273] CPU: 1 PID: 4273 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 670.763096][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 670.773168][ T4273] Call Trace: [ 670.776505][ T4273] dump_stack+0x172/0x1f0 [ 670.780877][ T4273] should_fail.cold+0xa/0x15 [ 670.785507][ T4273] ? __save_stack_trace+0x8a/0xf0 [ 670.790586][ T4273] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 670.796417][ T4273] __should_failslab+0x121/0x190 [ 670.801370][ T4273] should_failslab+0x9/0x14 [ 670.805892][ T4273] kmem_cache_alloc+0x47/0x6f0 [ 670.810675][ T4273] ? p9_client_rpc+0x21c/0x1230 [ 670.815538][ T4273] ? p9_client_create+0xb7d/0x1400 [ 670.821143][ T4273] ? v9fs_session_init+0x1e7/0x1960 [ 670.826339][ T4273] ? v9fs_mount+0x7d/0x920 [ 670.830742][ T4273] ? legacy_get_tree+0xf2/0x200 [ 670.835576][ T4273] ? vfs_get_tree+0x123/0x450 [ 670.840324][ T4273] ? do_mount+0x1436/0x2c40 [ 670.844831][ T4273] radix_tree_node_alloc.constprop.0+0x1eb/0x340 [ 670.851176][ T4273] idr_get_free+0x425/0x8d0 [ 670.855679][ T4273] idr_alloc_u32+0x19e/0x330 [ 670.860283][ T4273] ? __fprop_inc_percpu_max+0x230/0x230 [ 670.865833][ T4273] idr_alloc+0xe5/0x150 [ 670.869998][ T4273] ? idr_alloc_u32+0x330/0x330 [ 670.874777][ T4273] p9_client_prepare_req.part.0+0x4e5/0x7a0 [ 670.880680][ T4273] p9_client_rpc+0x21c/0x1230 [ 670.885343][ T4273] ? add_wait_queue+0x112/0x170 [ 670.890295][ T4273] ? p9_pollwait+0x76/0x210 [ 670.894792][ T4273] ? p9_client_destroy+0x360/0x360 [ 670.899901][ T4273] ? p9_conn_create+0x4f0/0x4f0 [ 670.904740][ T4273] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 670.911069][ T4273] ? pipe_poll+0x2c4/0x340 [ 670.915514][ T4273] ? generic_pipe_buf_confirm+0x10/0x10 [ 670.921102][ T4273] ? p9_fd_poll+0x1e7/0x2c0 [ 670.925626][ T4273] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 670.931887][ T4273] ? p9_conn_create+0x3ef/0x4f0 [ 670.936750][ T4273] ? p9_fd_create+0x277/0x3a0 [ 670.941433][ T4273] ? parse_opts.part.0+0x330/0x330 [ 670.946541][ T4273] p9_client_create+0xb7d/0x1400 [ 670.951487][ T4273] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 670.957301][ T4273] ? p9_client_zc_rpc.constprop.0+0x10c0/0x10c0 [ 670.963539][ T4273] ? rcu_read_lock_sched_held+0x110/0x130 [ 670.969252][ T4273] ? lockdep_init_map+0x1be/0x6d0 [ 670.974274][ T4273] v9fs_session_init+0x1e7/0x1960 [ 670.979290][ T4273] ? v9fs_session_init+0x1e7/0x1960 [ 670.984476][ T4273] ? find_held_lock+0x35/0x130 [ 670.989252][ T4273] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 670.994895][ T4273] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 671.001149][ T4273] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 671.006963][ T4273] ? v9fs_show_options+0x7e0/0x7e0 [ 671.012074][ T4273] ? v9fs_mount+0x5e/0x920 [ 671.016499][ T4273] ? rcu_read_lock_sched_held+0x110/0x130 [ 671.022242][ T4273] ? kmem_cache_alloc_trace+0x354/0x760 [ 671.028057][ T4273] ? legacy_init_fs_context+0x48/0xe0 [ 671.033441][ T4273] ? rcu_read_lock_sched_held+0x110/0x130 [ 671.039193][ T4273] v9fs_mount+0x7d/0x920 [ 671.043444][ T4273] ? v9fs_write_inode+0x70/0x70 [ 671.048295][ T4273] legacy_get_tree+0xf2/0x200 [ 671.052987][ T4273] vfs_get_tree+0x123/0x450 [ 671.057501][ T4273] do_mount+0x1436/0x2c40 [ 671.061850][ T4273] ? copy_mount_string+0x40/0x40 [ 671.066786][ T4273] ? _copy_from_user+0xdd/0x150 [ 671.071649][ T4273] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 671.077892][ T4273] ? copy_mount_options+0x280/0x3a0 [ 671.083087][ T4273] ksys_mount+0xdb/0x150 [ 671.087426][ T4273] __x64_sys_mount+0xbe/0x150 [ 671.092123][ T4273] do_syscall_64+0x103/0x610 [ 671.096731][ T4273] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 671.102632][ T4273] RIP: 0033:0x458079 [ 671.106540][ T4273] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 671.126152][ T4273] RSP: 002b:00007fcbd7c88c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 671.134580][ T4273] RAX: ffffffffffffffda RBX: 00007fcbd7c88c90 RCX: 0000000000458079 00:52:22 executing program 4: r0 = socket(0xa, 0x1, 0x0) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) getsockname$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) setresuid(0x0, r3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) 00:52:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 00:52:22 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200031, 0x0, 0x0, 0x0) [ 671.142988][ T4273] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 671.150985][ T4273] RBP: 000000000073bf00 R08: 0000000020000280 R09: 0000000000000000 [ 671.158964][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbd7c896d4 [ 671.166957][ T4273] R13: 00000000004c3d9d R14: 00000000004d6fb8 R15: 0000000000000005 00:52:22 executing program 0 (fault-call:4 fault-nth:22): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:22 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup2(r1, r0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000)=0x321, 0xffffffffffffff12) inotify_rm_watch(r2, 0x0) 00:52:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) fgetxattr(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=""/202, 0xca) 00:52:22 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0xc9e7352123677f41, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x20, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000f6bffb)='\a\x00\x00\x00', 0xfffffefffffffffd, 0x24a, &(0x7f00001a7f05)=""/251}, 0x48) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x50, &(0x7f0000000080)}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x90000, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x5f33, 0x10000) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x40000, 0x0) mkdirat$cgroup(r1, 0x0, 0x1ff) 00:52:22 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:22 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200032, 0x0, 0x0, 0x0) 00:52:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x680, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e22, @local}, {0x2, 0x4e20, @multicast2}, 0x280, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x200, 0x7}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x13}) 00:52:22 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x84000) openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) 00:52:22 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x6) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x10200, 0x3, 0xf000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r4, 0x400443c8, &(0x7f0000000080)={r3, 0x3}) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x2b6) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x800) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) ioctl$SG_GET_COMMAND_Q(r5, 0x2270, &(0x7f0000000180)) [ 671.826303][ T4509] XFS (loop5): Invalid superblock magic number 00:52:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0xdfffffff, 0x0, 0x0, 0x0, 0x9, 0x801}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) 00:52:23 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200033, 0x0, 0x0, 0x0) [ 671.950016][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 672.286690][ T4746] XFS (loop5): Invalid superblock magic number 00:52:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:23 executing program 2: unshare(0xa000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x1000, 0x109040) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001f9) inotify_rm_watch(0xffffffffffffffff, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x4000) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000040)) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{}, {}, {}, {}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000180)={r3, 0x2}) 00:52:23 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x9, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x40000000010) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x9c, r1, 0x220, 0x0, 0x201, {}, [@TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x9c}}, 0x0) 00:52:23 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0xc000) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x78) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x13}) 00:52:23 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200034, 0x0, 0x0, 0x0) 00:52:23 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x7, 0x4, 0x580, 0x358, 0x358, 0x358, 0x498, 0x498, 0x498, 0x4, &(0x7f0000000100), {[{{@arp={@rand_addr, @multicast1, 0xffffff00, 0xff, @empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}, @empty, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}, 0x7, 0x3, 0x6, 0x6, 0x2, 0x5, 'caif0\x00', 'syzkaller1\x00', {}, {}, 0x0, 0x110}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x5, 0x0, 0x1}}}, {{@arp={@loopback, @loopback, 0xffffff00, 0xffffffff, @mac=@link_local, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}, 0x9, 0xffffffffffffee62, 0x400, 0xfffffffffffffffd, 0x7f, 0x9, 'gre0\x00', 'veth0\x00', {0xff}, {}, 0x0, 0x1}, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1000, 'system_u:object_r:etc_runtime_t:s0\x00'}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @broadcast, @rand_addr=0x1, 0x8, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x5d0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000002c0)=""/161) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) clock_gettime(0x7, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="87000000a957206f487c60e400000000000080002038257a8c03c801040000000000006c7b64afcbcc66556e92487d0504a70fbe35e1a79d4c190b6746fc886e5d5ca38abba335d82cd9b23423e01548f5a24f74f7fc8c52ef86f630a655001283c7cb14c944276f04749ea65ff02e81c6edf2e32737ec05a4ab8009dcbdadb5f4adf35b31a8f6f46d5e8d84ab0e04d0fe5948925e0b0000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x20) r3 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x13}) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000380)=""/229) 00:52:23 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x10, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:23 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:24 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vga_arbiter\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) getsockname$ax25(r0, &(0x7f00000002c0)={{0x3, @netrom}, [@bcast, @remote, @default, @bcast, @default, @default, @null, @null]}, &(0x7f0000000480)=0x145) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @dev, @initdev}, &(0x7f0000000500)=0xc) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r2 = semget(0x3, 0x0, 0x10) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000000)='./file0\x00', 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000680), &(0x7f00000006c0)=0x0) getgroups(0x5, &(0x7f0000000700)=[0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000740)={{0x1f, r3, 0x0, r4, r5, 0x100, 0x29fb}, 0xffffffff, 0x44, 0x2}) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x78, r6, 0x12, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x1f, 0x9, 0x6, 0x0]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x8, 0x5]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x78f85890}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr="46a729b317b219a1448ac751321e534f"}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x20}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x81}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000005}, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0x1) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, &(0x7f0000000140)}, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r8 = memfd_create(&(0x7f0000001b40)='t\bnu\x00\x00\x00\x7f\x00\x00\x8c\x00\x10\x00\x00\x00\x00\x00\x00N\x1c\xc3\xfe\xc3.\x12\x1e\xcc\xf2\xd8\xd5l\x04~K8\xff\xe1S\xfa\xc1\xbb\x8bx\x9e\v\x83\xf6\xb2q[\xfd\xd8\x8b\x1d7\xcc\xe9\x82\xe8Y\xda\xec\x02sh5\x8d\x90J\xd0v\tu@\x13\x94\xd3\xe2\x8d\xec\x914\xcaKy\xe9K\x9cP\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa1\xff\x96\xec\xf8\xcaJH\xef\xfc\n.}\x0fnvI\x83\xa5\xfc\xd3\xe4(\xa7&\xab\xd2\xd5\x90\x87\xea\xddO\x1f\xff\x00\x00\x00\xdd\xb1\xc6\xae\x0f\xb6\xfcEq\xc3\xe6p\x95\xc7x\x91\x9c\xf4\x10W\xfd\xea\xb3|\xa1\xb0M\x06C\xf1\xb5\xc3\x8a\xaf\x1b\x98\xc9c6\x13\xa6\x94\x14', 0x0) pwritev(r8, &(0x7f0000000080)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081804) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) ioctl$LOOP_SET_STATUS64(r7, 0x4c03, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1c, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc80000000025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd0160ec941a3de45387daf7b1ac786d0e8a75e8904655faf6f2bc6cc487d93a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffffffffffff4116893616105829576914e70bfeb59800f97c97644ab8a7"}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:52:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) pipe2(&(0x7f0000000000), 0x4000) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x2, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x8}) [ 672.961342][ T4841] XFS (loop5): Invalid superblock magic number 00:52:24 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200035, 0x0, 0x0, 0x0) [ 673.401850][ T5015] XFS (loop5): Invalid superblock magic number 00:52:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:24 executing program 2: unshare(0x8000400) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) accept4$x25(r0, &(0x7f0000000040)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:24 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x900, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:24 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x101ff, 0x0, &(0x7f0000ffc000/0x3000)=nil}) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f00000000c0)={0x2, &(0x7f0000000080)="48f26d60502f358a"}) 00:52:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) syz_extract_tcp_res$synack(&(0x7f0000000400), 0x1, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000100)={0xc, 0x306, 0xfa00, {&(0x7f00000001c0)}}, 0x10) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000080)="7b3167966fb25e0dc1fcddf23602a298c05364055bf1a07798dcf1fb9be0bcc2ba5f9cb5ed08b7a2ec6c11ee28cb6032b69907dd38cf12555733f0d5c21fc8175a394f8f0e47f19c1095dc21d26d15132788061f47be50c5fd6b") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x80000000}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x2, 0x37d, 0x391, 0x0}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r3, 0x3}, &(0x7f00000003c0)=0x8) read$FUSE(r2, &(0x7f0000000640), 0x1000) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0x4) 00:52:24 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200036, 0x0, 0x0, 0x0) 00:52:25 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x1020, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) epoll_create1(0x80000) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:25 executing program 2: unshare(0x8000400) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x10000000a, 0x0, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/48) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f00000001c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1, 0x7}}, 0x24) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @mcast2, 0x1}}, 0x24) [ 674.035580][ T5126] XFS (loop5): Invalid superblock magic number 00:52:25 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x2000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x210002, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e21, 0x79, @rand_addr="a2e4b1040a0b705751d948058e0056b9", 0xfffffffffffffff6}, {0xa, 0x4e21, 0x20, @loopback, 0xfffffffffffffff7}, 0x7, [0x8, 0x9, 0x9c25, 0x1, 0xecae, 0x80000000, 0x4, 0x1]}, 0x5c) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x100000000000000, 0xfffffffffffffffe, 0x8, 0x10001, 0x80000000200}) r2 = syz_open_pts(r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000e40)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f00000001c0)=0xe8) fstat(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000800)=0xe8) r8 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000940)=0xe8) stat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fanotify_init(0x63, 0x101000) r11 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0, 0x0}, &(0x7f0000000a80)=0xc) r13 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, &(0x7f0000000b00)=0xc) getgroups(0x8, &(0x7f0000000b40)=[0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee00, 0xee00]) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) fstat(r2, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000f00)={0x0, 0x64}, &(0x7f0000000f40)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000f80)={r18, 0x335, 0x7, 0x6, 0x5, 0x9}, &(0x7f0000000fc0)=0x14) lstat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000011c0)=ANY=[@ANYBLOB="02000000010005000000000002000100", @ANYRES32=r3, @ANYBLOB="02000300", @ANYRES32=r4, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="02000500", @ANYRES32=r6, @ANYBLOB="02000100", @ANYRES32=r7, @ANYBLOB="02000000", @ANYRES32=r8, @ANYBLOB="02000700", @ANYRES32=r9, @ANYBLOB="040006000000000008000200", @ANYRES32=r10, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r11, @ANYBLOB="08000400", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=r14, @ANYBLOB="0800070011ddda7858ad291fff1d779b3853ca5ffa4786aa9393dd6b52d571f2257f8d4cacade4872c6501d669d74b2ce2a85442fa7199521e043ca0da68ba0bc1d4481b432c6ec26fddf9873d1c5d5bbb79da6e9c242b2c611c698a418182305e323b2b584cdd166ef61ca669b2c7c2316a622615903ca2aca2d49692529b45cca7de", @ANYRES32=r15, @ANYBLOB="08020640", @ANYRES32=r16, @ANYBLOB="2f45d49343a17412fdebe257e5bdb0aee8f3fe1f7fa8353320ab29bab1b59cf0e7c924e4d57e0763a737c76ec3228592db4df630dba0d71f633a5dcec40d27d3c34a227ecb7639904a30bd5709f030b8d40f811cb0f35680f9161e665a8c0d8f58f00188ec9bd7b59b2220a94c0988286599a426d34766a7094651ba1bb4c22dc3218986a8e3bc68356eae31712d", @ANYRES32=r17, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="10000300000000002000020000000000"], 0xa4, 0x2) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x13}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)=0x5b08) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@empty, @in6=@remote}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) 00:52:25 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200037, 0x0, 0x0, 0x0) 00:52:25 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) syz_open_procfs(0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x0, 0x7fffffff, 0x5, 0x0, 0xf, 0x1f, 0x5, 0x8001, 0x3ff, 0x4}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x10000, 0x10000) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x2) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000140)={0x14, 0x2, 0x2}) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000180)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x630}, {&(0x7f00000000c0)=""/85, 0xfb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xf0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x4000000000000f0, 0x0, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 00:52:25 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x2010, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:25 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x101, 0x2, 0x0, 0x4, 0x4}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x1f, @local, 0x4}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r2, 0x8, 0x80000001, 0x100, 0x7fffffff, 0x5}, 0x14) r3 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x13}) sync() 00:52:26 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x3f00, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:26 executing program 4: r0 = socket$inet6(0xa, 0x4000000080002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) set_robust_list(&(0x7f0000000100)={0x0, 0x3}, 0x18) setsockopt$inet6_udp_int(r0, 0x11, 0x10000000000001, &(0x7f00000000c0)=0x80000000, 0x3d3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x802, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4c80, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000100)) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) socket(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = pkey_alloc(0x0, 0xf7ffffdffffffffc) pkey_free(r5) r6 = dup3(r4, 0xffffffffffffffff, 0x80000) futimesat(r6, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x0, 0x7530}}) flock(r4, 0x5) flock(r6, 0x100000000000005) r7 = gettid() syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9, 0x7ffc) dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(r8, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000003c0)) tkill(r7, 0x1000000000015) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xf}, r7, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000300)={0x3c, 0x24, 0x11, 0x1b, 0x7, 0x5, 0x5, 0x51}) 00:52:26 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0xedc0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 674.974091][ T5300] XFS (loop5): Invalid superblock magic number 00:52:26 executing program 2: unshare(0x400008000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101040, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x5}, 0xfffffffffffffffd) r3 = fcntl$getown(r0, 0x9) sched_getaffinity(r3, 0x8, &(0x7f0000000180)) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:26 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200038, 0x0, 0x0, 0x0) 00:52:26 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x8000a0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:26 executing program 2: unshare(0x8002400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:26 executing program 4: clone(0x20000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0xb) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x8) write$P9_RXATTRCREATE(r1, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) 00:52:26 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0xfeffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:26 executing program 2: unshare(0x8000400) r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video37\x00', 0x2, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x150, r1, 0x700, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9a6}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2a70}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x150}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400000, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x5, 0x0, 0x8000000}) 00:52:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:26 executing program 3: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)="a911f445c6e8a0a1af26893fae6de1a83ddfd1bdfbc194af5fdc47d4ff309dfc68f37665962ef1a3033576856e69ed1f10f8234604b2795f232a85d414750a3e3c7d979e4aecf5774b2d8c041477ab8a92eb7ce8956f6fb90d2d9b8fec79eb3790d37b40041e360cf0a43336eaa0979d74c80f1cc64bf0d69d9a42fb9777345f3c4ecb611a2c8e03df5725b4dd00509c076304015d6daa852448e62556ebb6f9840a1ebf63969523422e073bb8d6ef2bcd15547d409a549a22e6085b0335ef2e59177be180", 0xc5, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$reject(0x13, r0, 0x6, 0x6, r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000600)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x13, 0x694c}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x800, 0x0) connect$tipc(r4, &(0x7f0000000380)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x1}}, 0x10) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)=0x0) rt_sigqueueinfo(r5, 0x22, &(0x7f00000002c0)={0x36, 0x800, 0x401}) 00:52:26 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x1000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:26 executing program 2: unshare(0x8000400) r0 = accept4$rose(0xffffffffffffff9c, &(0x7f0000000000)=@full={0xb, @remote, @default, 0x0, [@netrom, @remote, @netrom, @default, @netrom, @rose]}, &(0x7f0000000040)=0x40, 0x800) ioctl$void(r0, 0xc0045878) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = request_key(&(0x7f0000001540)='keyring\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='+@y&cgroup(\x00', 0xfffffffffffffff9) keyctl$instantiate_iov(0x14, r2, &(0x7f00000014c0)=[{&(0x7f0000000140)="c760c9ff5133051b0aad487a9eb6ffc9c118f63d742450d64c87bd3ceea4611efa15e14f500c12989e42dbaf0351e768ac87a54e83d3126dfad50bb5fdd8eccfb2165aa4c8230e2ac6d3665e04f32c7f27cf609b2c6f8284e0b6b0e21014dc98b097ee1756a1b95477ae13b32a16ae5b99f3de43e35f5bba841adcb1bba73d9eca0a5590b9f5641472045311ea11", 0x8e}, {&(0x7f0000000200)="3547831962bff33161b2e62b62e45513aa32b8f6b93230e5f0ba0afb8870459d94885f712a88c3e73946b3a248be9f4fe95362b00c3652472801a4fdbad032fbdd2da15d8085ea9f6be450d08f154bcd46458a227d95d124e567358f9068bd584e4bd8300c182f32a78d078eae17895f97ff5ab759906399b19159e5f83b6172e22459aaabb3c177d8", 0x89}, {&(0x7f00000002c0)="f00a7d2be87aa460a989abaa37531cad755b785d934c24f0499ca2cd48088b51fcb81784f585219264ec594c3132e69b5417e3ff9e65a1e9a24f5167ab7e72abcdfaf64de287be465f9996dc7e285e35ad9355ff8a2e79e778e046599130497d724e2dbddcd3df002f7b31dacb13e4420f430e2a0f6523bc17a774e9d1cf943853d4cd7d1d26ca32c278c2c9e2819b765bcbe1ba055b904400deb7ab9b77282bce6bb97176f11244f6ece0d2c4e20d6223da82b39eb8e7962475e5359de857555c76aa2a531fceb2dd1cfe0b9b7e3c5d62483e808ef32086cb579c06de06d61b82a552251a9fd97cecb137990d0cce975c94f8f7a0b293e4692e3be9534f4a2d9bc7e2a2f4c461bfe892eecedd5b5ec07f899675fab2d6fcf2e02a6d81835974526a86343fd7a046c0fb1dce3748679401b3628f34dfb8b46799016a46bfa252a3e3de43c99eb6d5efbe59feb0251c28aa96bc0f4420fbe29735e51d99ba170396cc8e6be0da7f86fa107e893541349a65dafbb4622b56b2129d7606e68011bc2edff62584b32d46cb426e484f30d48765d3fb9dddb85339b447587879c492b052f37c79a81db132fd555565bf4fa23eda2a05ac50bad572a0b170fbae769db4a0c1a58c092f71dcfb38e8ea88aed2689edaffe071d6383172d14d5fbe81a99e41b75ce8b246ead9b8fb3d8cc1e9025e8bc843e7ad7a110305af9871e0c1ae1756fbe4e14a0263a01bbc7563eaf84d05fecec3bfcf9622e245d33259b22d2cedd6cb57ddbb84d55391c40510d4b612e9dc0fc2d5801808ad5fef2ec45c3fd716ac8b13f98f8f961144ca32b3fca0a59b8e0555c16822486289b1363263ed950d3227c2a489e880a56c42df1c70b5678c5e0f2922b705cac8229cdec691c19230537d5ff03a83bdba9f6be9a838cd1c65d312df948b269dd0961ca919c6c2dba1825c21de249bffb2d24a23d7a1d8f94044a8f307a72205291244afe79608cd148c07e7e17f2fba05eed18c3b0e93b8adf8aeebb4f12cec89846f22bab91de7263c6b581c063b09fba9349a2fe15af8046a22726244428bebb76fa7d804e915d1ca453ab9d8c0bf07efe5815d53ed23d1f2d8af82993298871501f1124b414daa7ba9f816df9e49fffe43dfcdd8ee8b8f36154be5d1db0aa0ab2ecbe417aad2958e2e34dd755995f45e97893cd02bd733aaa482b4ac2274004080b3850346ce406370a84985cae231f5777f138ec1ae1597c99dbc5660e4738596af60a0ca2abaf6e54469f9584c8ac43f6a160ff95694e4b50c94cff2382454a1d63068db1fc048b255a93342fc8c8fef1b593fe3eb86383e6b65fe1f7e97e7b868bd92b8db900cd213d4e126a8ff3a91cee428caa332ef88bc490cd6e2cca264d872bc1f4fe78defd370681f73b7cbf3b872ea8da54cf9380835d55a75be4202ad13f3730a4bf8e69c1a7ff57589410dd46628a728f0fbcff18a73ad3260b960e030d4f1a2c4939765b8b20b0f94bffeeb79c11daaeb857b8969ec18cfbcd14ba39e4f818dcc4693fefd2cbbb5c29be9bb8cce19085e5ed116e257865d9aa3f60869fd7f422e2e8e86ccb70fc28fbcb6e39e7e504bcc0e263078e0a8ac280527d13141baae85e0eea759402cb376388ba78317b3b306cab8bbc4820105ac7af204c756e60f021ff8af9c2365047dee8654d3d00d76adc69e73becb7ba4853dc5227e47d5f01eaefae2f44d7fc4eadac7d5d973fa443aa036f4cbd9acefcb9c185860a5bbfbf6af4e78f6cdca9182388c0c103fd98423f96c845f9605ef0ad4740d7f34c62f27a81a162cd1d50c470966d94eecedb44ef3ecee433d841f87cef0f46a6ff5bbb4f7e2b171b92db22032459cefc38d9e9b737e4c56e59e949403e2b8a597a843e657dd9890a5f61479f06b7b84f84785f7efb9f54240b8a76d3243c1c076e3ead3a4988beea2178d4d8025545c5721513406de1120ff5097d890adc92ee0cbfac775063c101629a8aa6be4f4a920cd49e59a2cd478344bcc5fa50370be2eea484235ff95301e17f56343032ed5f22d19baa7a1ac5bbe976644fda20c57199e4ed91e6ee8f989aead99fdbcd9b040f5ea88e84cb7395432f34a818a2875a39db43a20e49fee242636b30b062e6759fb4fdfabbce248e905eee5230ebc74eb5f99cdd64f15b7a193917efaefce4d631f4d67651480154c4f6cf3ff71246c07c77dc02107c0d06ae5845a199cd51d351227aa3db42cbe489cfa55850ab7590e12742b8a47eeb47659565f87bc54a3333cf53d1e60126eea1bb4577b9e7f6ef802927ede8bd37538b541e87a07a9ea679ed3e6a39522ff9cd57747ad6055284dfae5e4cc6b96c32b0fe456d67c278a4c8ab77f43ff702928e6e679f60e83432bad99907898290134ea0e684861903ed73749a6144be1edb67bb1995a4c6d2b54345b48492d6e636a812722fbe0408ba8656b5cff4fe6c8a135d6b2c0ceee1b6aee7bcb778fa5f76508a92bd6280e3f2856a37ff3dba921ef29d2b1a60fce844d69fe6fd75b5806aded83dd6c77e18c82620d5f6c490ee1334519cf441c6e1622533dfb624709ce94103a46bad44a97664b011ef716d3997c59b0207271fd7bd83008d7f9b5abf988da1e32e1921af73293366e980fa685b965632ad4943c886a63639e58358ce343f762bdbd55ed6b5cac51866acdcf11f9573d0fd86f7218df2353cbc85407dc2d4ff6a98c494f18b5ec95586318c27c62c0a3e8398f21be3390710f5cdb90161f3c5fd6e471937b8bb1a589496dda69b9db5740ab0a210621c20aed3ea03a840444c831beaea8c54da66962265a4d6eb30159b7d0c40e2157a22de0633c5ffcf249e04297b5780fe8b4d315f74b07da4332684e2f46e73c2a7199d97e890bc738e58c15b4d5e4c0b26723a51184b6179e1432808079cefb2bd03b2bcd5443978fe0df168c1eccaf0c0cdc254719815e00885bbcd0e24aed341b8621029704f7c0b20dbb27a1d856772810b493dbfd94ff77c041409d060656cb600cbeaec647194be45d1aa3e19fa8b7cac8b2d84ad933afea622ee1c1f433da6d728d2a9d39f67eb156acad8ca72a07ce907ff413507827a47bb344a35e2b2a18209f51cd38d5b81f2ba48d3355fa28ce906f6f497b31d393da7563e08b7d1d2f84151de2121ffbc3d14755f489a5f5a9ad83619fd6597b8b759213d6f6bf328a36cebd1e797d97583033f74f5bab0e2270e0d46588e2d8c3d6511af9a3bd82454cad204d3cc4519ab0afbf84be737417ae245f76c143ea7ee762220139f50eaf6cd27fe82198c5362e60c1047661962d3b7bb31de5cc6693a0e57b39379e87d853b5ed11e766a9b331e5df227344d89a7afdabb9f4209263b4cbf52625bf7597e80febe2ab8282552db8222a8968632bcd56cc8ffa8d321b297989b904f3e6b32d10bba7dfe96ef6a5377979274034f8648860c41993a79e24c7a92964d833dec7462bee9c2a9759860dce3bd5f16199b02f45d7869e38e3f4bfe0159db85dc726c5fc538c729490512f63ce3c37cfa39951e52edc6a5c0a9c40b96ed4acf9c171028b3dcc264f2518bfe22c8ce3558bee4e90398039207f91c055b682eb1d1e7f4b70ea84c442afa748e4968454620b8eb9888a06181b9246bbd1c6a6817e61564e5fe47b060b1b3d950be74edf5f70d6c620ed9c23f27d06f26fe25c198e779077dab0102fada82b555d8a22eb719ccf9ebdc75419cff8e277cc1b4de4deb218030873f2daada81889afb6d88de31aa86dc60280bfb502d5a6871e5559a48ff8219a641fdb6d48a7474538c511cf0cfb47911aa767442ac7888267ae42c656fafc8d5884cba163c5c69f00a08de9e771a243bfee13ead99a2314d492a1526e575ef68df0d28395fe97a17fbe54832679ff0fd5863c5df6bf33f1570117a44131c4ee1e255a1cb2b74acd6199db7b89416616dbb6f3cacbd85c624057b6fb762b3f1bc90e39594b241ff3aab1abb9ad8def95eb1c58581c250a286f14a284e721ac9c9ba901dbedd99caf5a6c9c2b2ce5b7ed363df79181ae516c01a7816a953e93e49a6b337c23b0fe41ca8e6a3cfe5764dc6293e9f283f9464f0147a430be4af0ebf98ca6b47fa7a2fc8b8fc1fc8cd7787acab6dc59940a3b8ae9abe63c4fed2855e79b46f5e36396abfe7fec86df0bac3e7f31866e0d2d22817cd64ce922c1e8587880511b760fa6abf5ac87dc4054a6b58278172f552ebbecc5c01525d2f75d85ef4270681792bd4e9d3df6cc1fc424eef01a22edad0e8750a573a407b03635a6efbff432022e39ac1897360f09ca918907b2cdf9417961733239ccb942cf6c55b2064e4d51d9a7983832b94faba67117a267461c4d0b053590620e72e0728942225eb0e9a94c88d965a6e3451d3806db7905060c782d920a8307655d9d2f70f5ba5c8d1ca941907df9e4fd0c58e4cfcc65d48cb30de306b4c4b6ab88bc49c84f6127d59899cbdddcd355aab0bf77d27bf211a738fa3b7869a20c0d2352da365cf5d0c1f8962a1522d9c90b5612160e16f10a8dc3fcd6d27807170d631757e65c4faede2e9a638bada36848e8b8c17eafad92504afeeddbc2f8d98a39f5445c19a75c25bf48dede71c452a330cd3fbd5f05aff7733ebe19dba3f7e286c4415e890ecb886b95f554c015b642b103f7c84f4e57041ff98bb0a05b5b5e8d0a0558e90ed35330be07196213bf23b42ae5132c43c5f127e774ed7c2bd98427a70a9cfe0775ebdc1ae4ad85f3e5e535ebdf825fc95ebba7a8dc3de0db7c4b2476e2272500d322b8c4c3fbf4a45e82ee9e04454cacae2758f506a4d1d5afdf733898ff98db9e2dd7d82dd6b0656f705816abdeb46bb97ff1bea4f44df075d991d16c146d25f4ed941297ead3d53e3839080ac86c9aec6243a6e79717ca5a33a095a6fba9812586b074fa189d0772540bbb7b3348ef38a16228e1b28cf448990633a9ad783c5446cff2a0ea6651bad616106ebe27d084b5baca8369c71cab8ff31df695a5fb4ca4dbd6d46a185a907dc191717fdeba943a9599b776d09662a06472eb5041d0a0727a2e9f36a64de2389fe1b0bada622503a85f79f3de2229e4f5ac876a036eb42e09b9a4c38bb922a5a4ecccf98d192a6398eaa23452f898ed966b2185711ebd90bdd6e2895678128b54ef086b2fd7cecd633125362d2d7017c5be0a59f752fafb78319c9fdc038eff8b1aa9afa20021ba7ae3dd62671374e151cba0ed00121ca3293e467e5af4d3bbf7cad7478d732b0166c2a5a16edb3a9cd56878ff82c928090b84376590fcc8678c846472607d0dd994947aafdc54b2fb105484cb9570c5d13a2d06be86e29ff8587e05249f8ae38c410b6b098d735edd28f146cbb3f7927d4ce5e0a642902802a2092c0c86af880fa1b1a94d722f67f3941877cdce8d98c3d5f924641a38df4b5825f19bfed320ea706809612f7fd71b2ee33eca623788e54c873eebb731c659b2346ae770b266276cc8d38067829ca86ae54b550759a195f88e3e624a093a49f08d3371d4c823dd8a498782e4b2d6a0965a47f279032bff8b6a4b874aec502542aad2369dbd4321e3ed1f18cab588b6a796b6a8b718ebfdd55f9062554cf8a9cd304dffb65fcdc44c057c2759d63ff832daf2fc486195e3c529be9945cd5e293ad9aec5ab30f080fe1228093a40dc3c9f2584fd4efeaae5b1c16a2b144bc50b12bb3338374fefb68fdf2253aefcbc31c9c592734a9477789ed8f53edeccab98e532b9b365a059d523347cf7719dc4c8974804", 0x1000}, {&(0x7f00000012c0)="3639849cc94754e58373af104cc0bd072efaebb6acb15963d2e67e02d26ad7521af0dc115270b3ea55ee2b9ca1659ae7ed43afcff1060862c0b977a8c90fe2bc5741fe4132ebdaf7005d3adb65290f9c94372eb0050ff9ada99ebcdbde7541743b9d0b29802dd0c6ea7682461522559f06d45e055d29aa74d146d2ca14d5a451ec4ddb88b0aad2ec5b2ca2738f44c1e17b84e87794e35aed3a8e15eeb6bf1e74ef8b9a2e8fd39f6b6294e83a", 0xac}, {&(0x7f0000001380)="162ef815ea60ebc6b6e523e74432a517a62c68b29bb1050cc83f685648d427fd6fb925c98f23d23e892d16d6b2a9344b54f218f5d65d7c4782b7b3fba10c20e67595dd3b437a641a196880015e323b7c8daa655a5b990cf43904514cfcbb65529c85cbcdfe4ba69c06e194c833dce13182d86928f1743394f85b2a64842772f4bbde5bfb471adfe312c77ee07267555d2c6439288f753497306562c3a3b550be6bccf8f3a78ea51a42eb9576b2a934b7a85f693153141f48d8f802c4ad77dc48625eab05158bb0ada7e21859c011775add84525b", 0xd4}, {&(0x7f0000001480)="5b70ce837b3cb285870b785915ae08172d6e95c612", 0x15}], 0x6, r3) 00:52:26 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200039, 0x0, 0x0, 0x0) 00:52:26 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x101, 0x2, 0x0, 0x4, 0x4}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x1f, @local, 0x4}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r2, 0x8, 0x80000001, 0x100, 0x7fffffff, 0x5}, 0x14) r3 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x13}) sync() 00:52:26 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x2000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:26 executing program 4: epoll_create1(0x0) set_mempolicy(0x4002, &(0x7f0000000380)=0x7, 0x9) r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x4) mq_notify(r0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) openat$cgroup_type(r0, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000240), 0x0, 0x8, 0x0, 0x8, 0x0, 0x13bf, {0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, "2ca5efa3aba691d6e07bbc10ba6d0c5b6b40bbf95a5d2f9d892c7a4320755ebc"}}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000005c0)) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x10003, 0x2}) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="00fb6802ff93c225831cae686f0100cd050035d030b8611845c1f72d50d35729ed8af95570fe0062c38014e673009a308edf44871dca25e536af5a689dad59a1a5835b5d859e22f6ec909f216ecd406851c200893e5dcbddd697dc20daab5d999688db18b951233fd97e717fec83c0ce4f212910a7fd3c2f628690291eeda32ac3b72704d9f16d038124cd53aaceb83bbe1d76fce3b08ccc073feff9c943f8a409a9696ed9906b685d3e0eb1aa04dfa71f78003444000000000000"], 0x1, 0x1) fallocate(r0, 0x0, 0x0, 0xa6ba0) r1 = dup(r0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000200)) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000003c0)={0x5, "bec6da4797bf953b924adfb20b7a574b7cf9b43f0f5de2bc76019a994a56ed72", 0x0, 0x1800, 0xffffffffffffd310, 0xffffffffffffffff, 0x5, 0x2, 0x401}) io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x0) r3 = add_key(&(0x7f0000000500)='big_key\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000006c0)="c7b6f041b23aa46897b2fff79b75", 0xe, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000700)='fdinfo/3\x00', &(0x7f0000000740)) getsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100), 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000040)={0x5, 0x6, 0x7ff, 0x8, 0x10001, 0x3, 0x10001}) 00:52:26 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x5, 0x111000) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xfffffffffffffff7, 0x90a00) r2 = syz_open_pts(r1, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000180)={0x9, &(0x7f0000000100)=[{0x2, 0xfffffffffffffffb, 0xfffffffffffffff8, 0x3}, {0x80, 0xfffffffffffffffd, 0x1, 0x1}, {0xff, 0x1000, 0x10001, 0x2}, {0x3, 0x10001, 0xffffffff, 0x2}, {0xfffffffffffffffb, 0x40, 0x8, 0x5f0}, {0x5, 0xaf, 0x7, 0x8000}, {0x8000, 0x60c, 0x6, 0x80}, {0x2, 0x67f, 0x6, 0x6cb}, {0x912, 0x100, 0x6, 0x768}]}, 0x10) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x2, 0x101, 0x7ff, 0x1, 0x11, 0x7fff, 0x8, 0x3ff, 0xfff, 0xff, 0x9b, 0xffffffffffffff8f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x13}) 00:52:27 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) inotify_rm_watch(0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 00:52:27 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x9000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 675.930999][ T5774] XFS (loop5): Invalid superblock magic number 00:52:27 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x701141, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000300)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400cc1, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000180)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=0x0, &(0x7f00000006c0)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000700)={r4, @in6={{0xa, 0x4e20, 0x9, @loopback}}, 0xc9fc, 0x4}, &(0x7f00000007c0)=0x90) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000440)={0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000005c0)={r5, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000500)={0x4, 0x1ff, 0xfffffffffffffbff, 0x0, 0x4}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000003c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000400)={0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={r8, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000640)={0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000480)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000004c0)={r9, r6}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000680)={r7, 0x0, 0x87}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000100)={r10, r11}) fstat(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000080)=0xffff, 0x4) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r12, r14) socket$inet(0x2, 0x80002, 0x413) r15 = syz_open_pts(r1, 0x0) ioctl$FS_IOC_FSSETXATTR(r13, 0x401c5820, &(0x7f0000000800)={0x95a2, 0x81, 0x4, 0x5, 0x2}) ioctl$TCSETSF(r15, 0x5412, &(0x7f0000000040)={0x13}) 00:52:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:27 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x18000) inotify_rm_watch(r1, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000100)={0x0, 0x0, 0x103, 0x3, {0x6, 0x80, 0x76, 0x3}}) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:52:27 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x20003a, 0x0, 0x0, 0x0) 00:52:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x4) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:27 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x10000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:27 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x2000) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000080)) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0x6, 0x7, 0xffffffffffffffc1, 0x800, 0x6e9, 0x100000000000000, 0x8}) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') getdents64(r1, &(0x7f0000000200)=""/116, 0x184) 00:52:27 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x42042, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xc0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000080)={0x1f, 0x4, 0xa9dd}) write$UHID_CREATE2(r1, &(0x7f00000001c0)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0xe5, 0x9, 0x0, 0x0, 0x4, 0x3de, "0638a4498a7a84121b1aa618dd795c8e937f4eca4d4c512b3962a3aafc8a378db0c1eae1098df03f278c8aeed6673427e65cfbe925b45cf24fb3028914df076eac0a39d66545b702e28b409000b2ce76d29346e683d0ee0db5c659435f205e721fd64db0515bce3086f63f0390d6496e70734ebc7000fff55375771533e97270bb2efacbc1c626f241b61f4811dd6c81396828be7aab59ea4d0c8aec3ac7a37d9ee1ba20121f3c34df80502e09d92d6c772cc07adef4523e862225186a547d6346ede87cbeb3f4760f61ab81e4475f93c0db1f4d2bcdab8653d2ad52ff2f487c901bf14f2a"}, 0x1fd) r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) bind$vsock_dgram(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @reserved}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000003c0)=""/165) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x13}) 00:52:28 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200000, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) unshare(0x8000400) socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$bt_hidp(0x1f, 0x3, 0x6) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:28 executing program 4: r0 = pkey_alloc(0x0, 0x3) pkey_free(r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x141005, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000700)={{0x0, 0x1, 0x80}, 0x0, 0x20000160, 0x0, 0x0, 0x0, 0x0, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', 0x0, 0x0, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10) getgid() getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, 0x1c) connect$l2tp(r4, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r4, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 676.940425][ T5934] XFS (loop5): Invalid superblock magic number 00:52:28 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x20100000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:28 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x20003b, 0x0, 0x0, 0x0) 00:52:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:28 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}, 0x2, 0x20}, &(0x7f0000000280)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e21, 0x1000, @mcast2, 0x3}}, 0x1, 0x6}, 0x90) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffffffff00000000, 0x800) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x87) connect$llc(0xffffffffffffffff, &(0x7f00000003c0)={0x1a, 0x0, 0x100, 0xfffffffffffffff8, 0x7, 0x8}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r4}}, 0xc) 00:52:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x1}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xfffffffffffffffc, 0x46480) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x736d, 0x6, 0x8208, 0x4, 0x3, 0x400, 0xfff, 0x7, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={r3, 0x6}, &(0x7f0000000200)=0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12, 0x0, 0x3, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40000002}) 00:52:28 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x3f000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:28 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x2002ec, 0x0, 0x0, 0x0) 00:52:28 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) prctl$PR_GET_FP_MODE(0x2e) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28}, 0x28) 00:52:28 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x8cffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x10000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x10040) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000080)=""/18) 00:52:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000100)) getpeername(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, &(0x7f0000000080)=0x80) getsockopt$inet6_tcp_int(r3, 0x6, 0x2f, &(0x7f00000000c0), &(0x7f0000000180)=0x4) 00:52:29 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0xa0008000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 677.963156][ T6208] XFS (loop5): Invalid superblock magic number 00:52:29 executing program 2: unshare(0x8000400) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x111140, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000001c0)=0x1ff, 0xffffffffffffff83) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x13}) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffff05cf, 0x6fa, 0x4, 0x6, 0x1, 0x7, {0x0, @in={{0x2, 0x4e20, @loopback}}, 0xffffffffffffffc0, 0x3, 0x240, 0x7, 0x9}}, &(0x7f00000002c0)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e24, 0x100000000, @empty, 0x1}}, 0x2, 0x0, 0x0, 0x6, 0x10}, 0x98) lseek(r2, 0x0, 0x3) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000080)='\x00', 0xffffffffffffffff}, 0x30) write$FUSE_LK(r4, &(0x7f0000000100)={0x28, 0xffffffffffffffff, 0x6, {{0x939, 0x7, 0x2, r5}}}, 0x28) 00:52:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:29 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200300, 0x0, 0x0, 0x0) 00:52:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0xa00, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x200000003, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000002c0007031dfffd946fa28300cee60a0009000000001d85680c1ba3a2ff030000280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:52:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x40010, r1, 0x100000000) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x420, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0xff}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x13}) 00:52:29 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0xc0ed0000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:29 executing program 2: unshare(0x410000201) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xfffffffffffff375, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @empty}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180)={r2, 0x5, "fc281c8946"}, &(0x7f00000001c0)=0xd) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:29 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2a, 0x800) write$FUSE_POLL(r2, &(0x7f0000000200)={0x18, 0xe8968d6c7a0205ff, 0x1, {0xb277}}, 0x18) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x10002, 0x0) dup(r0) r3 = dup2(r1, r1) r4 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xfffffffffffffffc) inotify_rm_watch(0xffffffffffffffff, 0x0) r5 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x3, 0x2) write$P9_RAUTH(r5, &(0x7f0000000100)={0x14, 0x67, 0x2, {0x2, 0x4, 0x7}}, 0x14) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f00000000c0)={0x0, 0xc4, 0x8, &(0x7f0000000040)=0x10000}) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000240)) 00:52:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) [ 678.781077][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:52:30 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0xf6ffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 678.931707][ T6557] XFS (loop5): Invalid superblock magic number 00:52:30 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0xfeffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:30 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x10040, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000180)) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000040)={0x13}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000080)=""/243) 00:52:30 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24) unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(&(0x7f0000000040)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 00:52:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:30 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/capi/capi20\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000011c0)={0x0, 0x267, &(0x7f0000001100)=[@in6={0xa, 0x4e23, 0x200, @local, 0xff}, @in6={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast2}, 0x34}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e23, 0x1, @loopback, 0x5}, @in6={0xa, 0x4e23, 0x7, @loopback, 0x3}]}, &(0x7f0000001200)=0x10) write$binfmt_aout(r0, &(0x7f00000012c0)={{0x10f, 0xffffffff, 0xd, 0xc5, 0x8a, 0xff, 0x37f, 0x3}, "30eb35c23eed6d0254e69ba5d0e479fc638ae2fac2dd507abf4fc077d81b8a8b191cf9bda75a0695c8d6c07bc51702936a", [[], [], [], [], [], []]}, 0x651) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001240)={r1, 0x4}, &(0x7f0000001280)=0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") getsockopt(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0xd) setsockopt(r2, 0x0, 0xfffffffffffffff8, &(0x7f00000000c0)="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", 0x1000) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$CAPI_GET_PROFILE(r3, 0xc0404309, &(0x7f0000000080)=0x7ff) 00:52:30 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x2004ec, 0x0, 0x0, 0x0) 00:52:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x13}) 00:52:30 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0xffff0000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:30 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x2) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0x3f, 0x3ff, 0x80, 0x7, 0x4b, 0x6b19, {0x0, @in6={{0xa, 0x4e24, 0x3, @loopback, 0x6}}, 0x0, 0x400, 0x5, 0x401}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r2, 0x3}, 0x8) 00:52:30 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1ff}, 0x8, 0x80800) write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x1, 0x9, 0x4, 0x9, 0x3, 0x0, 0x30000, 0x2ee, 0x38, 0x292, 0x8, 0x2000, 0x20, 0x1, 0x80000000, 0x81, 0x80000000}, [{0x7, 0x1, 0x6, 0x3, 0x1, 0x8, 0x30, 0x7f}], "9a8a9b8699bd0fe935dff3a289479ffe22070d60101d5b799cd12bf60686272da0cad5824a9754c042593553432ff5d1b1ea295af439de3d70b87ba2d5183f4f6bb537f4ad97fb79464f16490f918cbb342dad835edbb709660e66ddcfaacc8cb1d2e937e3662979c2a5983869a643bfd722011c32a8a6ed1a94a2c2ec57f76c94862ab5cd5a6ec8155758530dac5458eab3f380a51831b931b73754609b4771ca9dd844ff1a4ba8263a6b4d95b1faae581981", [[], [], []]}, 0x40b) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x13}) 00:52:30 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0xfffffe00, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:30 executing program 2: unshare(0x8000400) r0 = dup(0xffffffffffffff9c) openat$cgroup_type(r0, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) r1 = inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x40000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, r1) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x34, 0x81) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000380)={0x0, 0xfc, 0x1, 0x1000, 0x9, 0x4, 0x3, 0x1f, {0x0, @in={{0x2, 0x4e20, @remote}}, 0x7, 0xb14, 0x80000001, 0x1, 0x4}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f00000000c0)=r4, 0x22f) 00:52:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000000)=""/56) [ 679.848755][ T6722] XFS (loop5): Invalid superblock magic number 00:52:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xaa) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e24, @multicast2}, {0x2, 0x400, @multicast2}, 0x40, 0x0, 0x0, 0x0, 0x7c4, &(0x7f0000000080)='team_slave_0\x00', 0x7fffffff, 0xfff, 0x4}) 00:52:31 executing program 2: unshare(0x60000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffffc1, 0x400000) r3 = inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x10000030) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x3, 0x5}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000400)={r4, 0x7fff}, &(0x7f0000000440)=0x8) keyctl$session_to_parent(0x12) inotify_rm_watch(0xffffffffffffffff, r3) r5 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xd740, 0x40) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000100)={r6, 0x8021}, 0x8) write$tun(r5, &(0x7f00000001c0)={@void, @void, @ipv6={0x8, 0x6, "fb9de9", 0x15d, 0x7e, 0x1dd, @loopback, @loopback, {[@dstopts={0x2b, 0x15, [], [@pad1, @generic={0x5, 0x53, "ef11240f5a832529f3042a647c933addb6ea76ea423d57b771696e463ed2fcbf8f244838cf892bd5e7bb2e8a86edec6e6e4b001decba8a30de3bdac7fd73183e0e67d881d3714083c245ce0872068bd1cc8265"}, @hao={0xc9, 0x10, @loopback}, @pad1, @enc_lim={0x4, 0x1, 0x140000000000}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x10000, 0x4, 0x800, 0x4, [0x8, 0xfc]}}, @calipso={0x7, 0x18, {0x10, 0x4, 0x8, 0x10000, [0x4f9c, 0x2fb]}}]}, @hopopts={0x11, 0xd, [], [@calipso={0x7, 0x18, {0x80000000, 0x4, 0x10001, 0x9, [0x200, 0x400]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xc5ab}, @calipso={0x7, 0x20, {0x1, 0x6, 0xff, 0x41e0, [0x1fe000000, 0x0, 0x9]}}, @calipso={0x7, 0x18, {0xff, 0x4, 0x9, 0x2, [0x56, 0xc51]}}]}, @routing={0x0, 0x0, 0x2, 0x80000001}], @dccp={{0x4e24, 0x4e21, 0x4, 0x1, 0x80000000000, 0x0, 0x0, 0x2, 0x1ff, "327aad", 0x0, "baaa1c"}, "080b2ce419652feb223ec3a2958880803e291fbb6c807cba5ae6c89f10"}}}}, 0x185) 00:52:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:31 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0xffffff7f, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:31 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200500, 0x0, 0x0, 0x0) 00:52:31 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80, 0x0) recvfrom(r1, &(0x7f0000000040)=""/76, 0x4c, 0x40, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x3, 0x1, 0x3, {0xa, 0x4e23, 0x8, @empty, 0x3}}}, 0x80) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)={0x1, 0x0, [{0x15000, 0x96, &(0x7f0000000200)=""/150}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:52:31 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x28001) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r2, 0x1}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000140)={0x0, @reserved}) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x1, 0x10000, 0x7, 0x6, 0x17, 0x3, 0x25b, 0x514, 0x3, 0x4, 0x100000001}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:31 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) 00:52:31 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0xffffff8c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x80000) getsockname$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x10) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x13}) [ 680.824218][ T6972] XFS (loop5): Invalid superblock magic number 00:52:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x20000000000001, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = socket(0x2, 0x3, 0x100000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) bind$packet(r3, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) connect$bt_sco(r3, &(0x7f0000000080)={0x1f, {0x7, 0x797, 0x2, 0x4, 0x5, 0x6}}, 0x8) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r5, 0x200001a0, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}]) 00:52:32 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @broadcast}}, 0x24) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:32 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0xfffffff6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 681.295450][ T7211] XFS (loop5): Invalid superblock magic number 00:52:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r2, &(0x7f0000000c80)=[{&(0x7f0000000b00)="e2", 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) sendfile(r0, r0, 0x0, 0x2000005) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000600)) r4 = syz_open_pts(r3, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000240)) r5 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x3, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x13}) r6 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x2000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000080)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000200)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r7}) 00:52:32 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200600, 0x0, 0x0, 0x0) 00:52:32 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xb5a, 0x40) dup3(r0, r0, 0x80000) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xdd, 0x100) r3 = inotify_add_watch(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400) inotify_rm_watch(r2, r3) 00:52:32 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0xfffffffe, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:32 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000240)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 0x4e23, 0x40, 0x2, 0xa0, 0xa0, 0x0, 0x0, r1}, {0xffff, 0x5, 0x10000, 0x0, 0x5, 0xfff, 0x9}, {0x2, 0x9, 0x0, 0x2ee}, 0x800, 0x6e6bb3, 0x3, 0x0, 0x1, 0x3}, {{@in=@local, 0x4d5, 0x7f}, 0x0, @in=@rand_addr=0xffffffffffffd8f0, 0x3502, 0x3, 0x1, 0x0, 0x8, 0x5, 0x1f}}, 0xe8) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) inotify_init1(0x4000000000080000) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) vmsplice(r3, &(0x7f0000001500)=[{&(0x7f00000013c0), 0xfffffd90}], 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080)=0x2b, 0x8) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 00:52:32 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$TIOCCONS(r1, 0x541d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x2000) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0x3, 0x7f, 0x7}, 0x54}}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:32 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0xedc000000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 681.910704][ T7238] XFS (loop5): Invalid superblock magic number 00:52:33 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x1000000000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:33 executing program 2: unshare(0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000080)=@default) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x13}) 00:52:33 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200700, 0x0, 0x0, 0x0) [ 682.366005][ T7374] XFS (loop5): Invalid superblock magic number 00:52:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:33 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000240)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 0x4e23, 0x40, 0x2, 0xa0, 0xa0, 0x0, 0x0, r1}, {0xffff, 0x5, 0x10000, 0x0, 0x5, 0xfff, 0x9}, {0x2, 0x9, 0x0, 0x2ee}, 0x800, 0x6e6bb3, 0x3, 0x0, 0x1, 0x3}, {{@in=@local, 0x4d5, 0x7f}, 0x0, @in=@rand_addr=0xffffffffffffd8f0, 0x3502, 0x3, 0x1, 0x0, 0x8, 0x5, 0x1f}}, 0xe8) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) inotify_init1(0x4000000000080000) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) vmsplice(r3, &(0x7f0000001500)=[{&(0x7f00000013c0), 0xfffffd90}], 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080)=0x2b, 0x8) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 00:52:33 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = msgget$private(0x0, 0x2) msgctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/193) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x100, 0x7, 0x3, 0x8, 0x0, 0x5, 0x4, 0x1, 0x8, 0x1ff, 0x8, 0x8000, 0x7, 0x9, 0x7fff, 0x2, 0x676, 0x6, 0x1, 0x7, 0x40, 0x3, 0xcb, 0x3, 0xd7, 0x2, 0x8000, 0xff, 0x3, 0x0, 0x8, 0x2, 0x6, 0x8, 0x7ff, 0x71c, 0x0, 0x400, 0x0, @perf_config_ext={0x100000001, 0x6}, 0x1, 0x5302aec2, 0x7a, 0xb, 0x100, 0xffffffffffff4e85, 0x2}, r2, 0x2, 0xffffffffffffff9c, 0x1) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:33 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x8000a0ffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x6, 0x100000001, 0x10000, 0x5, 0x9, 0x9, 0xa19, {0x0, @in6={{0xa, 0x4e21, 0x10001, @loopback, 0x80000001}}, 0x3, 0x7f40000, 0x9, 0x101, 0x3}}, &(0x7f0000000540)=0xb0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000001640)={r3, @in6={{0xa, 0x4e21, 0x1ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffffffffffffffe0}}}, 0x84) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:33 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200900, 0x0, 0x0, 0x0) 00:52:33 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0xfeffff00000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) syz_open_pts(r0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80041, 0x0) ioctl$KVM_NMI(r1, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 00:52:34 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4000, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) [ 682.995675][ T7402] XFS (loop5): Invalid superblock magic number 00:52:34 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x100000000000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x81, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @local}, &(0x7f00000000c0)=0x8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="1c"]}) close(r3) close(r2) 00:52:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:34 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200a00, 0x0, 0x0, 0x0) 00:52:34 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x200000000000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000080)=""/124, 0x7c) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r3, 0x0, 0x2, 0x4}}, 0x2f) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:34 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000000)={0x1, 0x7}) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f00000000c0)={0xf59, "36e18e21cb7c316f9eaea896e683d755e13b8972e5fc41cc90b9e1cc2970ccaf", 0x3, 0x7, 0x7fffffff, 0x4}) 00:52:34 executing program 4: syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x721c0735fad46f54, 0x0, 0x10, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)={0x0, @bt={0x7ff, 0x2, 0x1, 0x1, 0x7, 0x1ff, 0x0, 0x40, 0x7fff, 0x10001, 0xff, 0x9, 0x6b, 0x100, 0x8, 0x10}}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) 00:52:34 executing program 4: socketpair$unix(0x1, 0x100000002, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020500090e0000000000e1000005000005000600000000000a0000000013256fb30b6850a854ffffff00000000000000000b0000000000000200010000000000000000020000d0f605000500000000000a00000000000000ffe7001f0002000000000000000000170000000000000000"], 0x70}}, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x2) r2 = geteuid() getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000000300)=0xe8) r4 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) getegid() lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='system.posix^\xaa\xe1\xcc~acl_accessm\xa1\xd5\x14\xbe;1\xa1\xac\x8egq\x00', &(0x7f0000000540)={{}, {0x1, 0x2}, [{0x2, 0x1, r2}, {0x2, 0x2, r5}, {0x2, 0x6, r3}], {0x4, 0x2}, [{0x8, 0x2, r4}, {0x8, 0x1, r6}, {0x8, 0x3, r6}, {0x8, 0x0, r4}], {0x10, 0x5}}, 0x5c, 0x3) 00:52:34 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x900000000000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:34 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') setsockopt$packet_buf(r0, 0x107, 0x1f, &(0x7f0000000140)="ffe274d371f8baedb1e1e001ad936da9c9b4e291b451eed4b03eb7c1d69fe74a0221e36ef28186445194cb76e9ed410d8b5d67bc6155f47579dc35c5c60b300e0682", 0x42) unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xc0000, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:35 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x1000000000000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 683.927035][ T7560] XFS (loop5): Invalid superblock magic number 00:52:35 executing program 2: unshare(0x8000400) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2, 0x0) fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x18) ioctl$TCGETA(r0, 0x5405, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:35 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x2000000000000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:35 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200b00, 0x0, 0x0, 0x0) 00:52:35 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x1000000000032, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000ec0], 0x0, 0x0, &(0x7f0000000ec0)=[{}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'bond_slave_0\x00', 'veth1_to_bridge\x00', 'syz_tun\x00', 'eql\x00', @broadcast, [], @broadcast, [], 0x70, 0x70, 0x1a0}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:bsdpty_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2}]}, 0x2a8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x8, 0x4) 00:52:35 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xff, 0x240001) inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x508) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x22000000) inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xc) inotify_rm_watch(r1, r2) 00:52:35 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x2010000000000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 00:52:35 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x3f00000000000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20}) 00:52:35 executing program 2: unshare(0x8000400) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) getpeername$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @local}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d600c1350000000000000000000275b76a3b555b"], 0x14}}, 0x0) setxattr$security_smack_entry(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.SMACK64IPIN\x00', &(0x7f0000000180)='/dev/btrfs-control\x00', 0x13, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)=0x3) [ 684.863770][ T7736] XFS (loop5): Invalid superblock magic number 00:52:36 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x8cffffff00000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:36 executing program 2: unshare(0x80103fe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2e402, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x1, 0x4800, 0x20, 0xffffffff00000000, 0x5a, 0x4, 0x20}, 0xc) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000140)=@md5={0x1, "1f21542448e74726ee8a167fbdcef4b0"}, 0x11, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\xff', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x40, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x84) getresgid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) 00:52:36 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200c00, 0x0, 0x0, 0x0) 00:52:36 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0xf6ffffff00000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000240)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f00000004c0)=""/12) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x282000, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f00000001c0)) poll(&(0x7f0000000400)=[{r2, 0x4080}, {r1}, {r5, 0x80}, {r1, 0x4000}], 0x4, 0x3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002d000100000000000080000000000000", @ANYRES32=r3, @ANYBLOB="5300004cb8a8c48e5e0059c8a2198af17c4a18ffe8851fecc8b4eed51ddd947e012717ada0392c425362e2500647490a982d08747100275f10e869ef3f950125d00000"], 0x24}}, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x80000001, 0x127082) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e22, @local}, {0x2, 0x4e23, @multicast2}, 0x101, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x5f9}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) 00:52:36 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup3(r1, r0, 0x80000) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x2000000) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:36 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0xfeffffff00000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:36 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x4000000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'team0\x00', 0xa92}) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) setns(r2, 0xa000000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) r4 = getegid() r5 = geteuid() r6 = geteuid() mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x1000000, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize', 0x3d, 0x1200}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@fowner_lt={'fowner<', r5}}, {@fowner_lt={'fowner<', r6}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x30, 0x73, 0x7c, 0x65, 0x33, 0x64, 0x24caced3a58cc22b], 0x2d, [0x76, 0x39, 0x0, 0x62], 0x2d, [0x0, 0x7d, 0x0, 0x32], 0x2d, [0x77, 0x0, 0x71, 0x62], 0x2d, [0x34, 0x73, 0x0, 0x37, 0x31, 0x37, 0x77, 0x36]}}}, {@smackfshat={'smackfshat', 0x3d, '-'}}, {@fsuuid={'fsuuid', 0x3d, {[0x73, 0x7b, 0x33, 0x66, 0x36, 0x0, 0x31, 0x7f], 0x2d, [0x33, 0x75, 0x39, 0x30], 0x2d, [0x37, 0x67, 0x0, 0x71], 0x2d, [0x33, 0x7f, 0x3a, 0x3d], 0x2d, [0x36, 0x32, 0x0, 0x64, 0x7f, 0x35, 0x3f, 0x7d]}}}, {@fsname={'fsname', 0x3d, '^'}}]}}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:37 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000000c0)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f0000000000)={0x1, 0x3, 0xfffffffffffffffe, {0x0, 0x2710}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}}, 0x0) getcwd(&(0x7f0000000100)=""/252, 0xfc) 00:52:37 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200d00, 0x0, 0x0, 0x0) 00:52:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:37 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0xffff000000000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)='/dev/ptmx\x00', 0xffffffffffffffff}, 0x30) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)=r1) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x13}) 00:52:37 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8080, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000000c0)={0x7fff, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e22, @loopback}}}, 0x108) 00:52:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x40000003, 0x400000000, 0x0, 0xfffffffffffffb99, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x4000000000000000}) r1 = syz_open_pts(r0, 0xfffffffffffffffe) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x56db, 0x4) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) r3 = dup2(r1, r0) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f00000000c0)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x0, 0x2, 0x4, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) 00:52:37 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0xffffff7f00000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) inotify_init1(0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@ipv6_getaddr={0x2c, 0x16, 0x3, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x300}, 0x1, 0x0, 0x0, 0x10000004}, 0x0) 00:52:37 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:37 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200e00, 0x0, 0x0, 0x0) [ 686.283188][ T8215] XFS (loop5): Invalid superblock magic number 00:52:37 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)={0x1, 0xffffffffffffd, 0x0, 0x0, 0x1b, 0x4, 0x1000}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000040)={0x13}) 00:52:37 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0xffffffffa0008000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:37 executing program 2: unshare(0x8000400) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e23, 0x6, @empty, 0x3}}, 0xa0, 0x7, 0x2, 0x5, 0xa8}, &(0x7f00000001c0)=0x98) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) [ 686.794506][ T8423] XFS (loop5): Invalid superblock magic number 00:52:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000028c0)='/deV/\x00\xe1\xb1c$I\xd0](\x10\xbbZ\x19\xd0\x14\x96}%\xed\x85\xb1YT\x9c\xf8@f\xa0\xd0G\x10-,\xc3+\xb8i\xc0\xaf\xbf\xfc\x99\x95\x835\xab\xeaH\b\"\x82\x82\x7f:k\xfe\xeb\x97\xd1\xbb&I\xe8\xf9\xe0\xab^\xbb\xbeY\xbf\x9f\xe3\xa5\xae\xfc\x93\xe2\xcfC\x8f\x89\xcbqB\x90a\xd3o8\xb1\xfa\xae\xe6\xb2\xaf\xfb\x1a\x10\xd5\x82\xb1$Q\x8c\x13\x9b\xc7z\xecM\x00\x01z\x8f\xdb\xb4\x82\x05S[\x85\xd9c\x16\x8dg?\x91y\xd3\xffN\xe9\x8bg\xe7\xfe<\xca#`(\xf5\xa7\x05\xc7\x12W\x94\xbc;\'\x1a\xa2\b)\x1a\xec\xec_i\xb8F\xb0\x06\x00bG\xb1\xbb\xdfx\xf8\x98\xda@\xe5M\xd0\xe4\xf0\x01V\x11/\xfa\x83\xe6^\xf0XfT\x90\xb1&D\xd1\x16a\x99\a#\xa5#\xbb\x99Fp\x92\x03\xcf\x8f\x85i\x81\xb1\x9e\x9a\a\x95\x17\xd84YT\f)\x1aSD\x19\x9d\x0e\x99!\x87\xe2?\xf2j\xfcS\xcb%C\x9b\xf8\x93\xd17\xf1\x97G\xa0g\xb5\xde\x1a\xc7\x83\xc1\x17\xcc\xd8\xf4\x15\xe5\x0e\xa7\x91N\xa3\x93\xe5&H\x7f\x1d\xd9\xa8)', 0x0) ftruncate(r1, 0xfffffd) sendfile(r0, r1, &(0x7f00000037c0)=0xf10001, 0xfffffdef) 00:52:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') mq_timedreceive(r2, &(0x7f00000001c0)=""/251, 0xfb, 0x9, &(0x7f00000002c0)={0x77359400}) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3402002c", @ANYRES16=r3, @ANYBLOB="00002dbd7000fedbdf25010000000000000001410000001800170000001e000003ff6574683a7369743000000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) 00:52:38 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x02', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:38 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x3ff, r0, &(0x7f0000000180)="d9a518c273f620440bc7a161d9303b3efc07d37efd24d99234aa2bf4696295ebfd15196312d3452372c0150fec106be25fda32237a737ce2ce5f15502e297933ef998616fd3e5738cd188d44ee893d828b3579b7d6268925d1f4431fb954be17efa1d947d0db201385b2bf0f979cb06292a94a42ee9b22c0a2437d3c6a9710b64320b07a2fa7b8", 0x87, 0x0, 0x0, 0x0, r1}, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000000c0)={{0x1ff00, 0x40}, 'port1\x00', 0x20, 0x1, 0x9, 0x1f, 0x101, 0x9, 0x46, 0x0, 0x7, 0x8}) recvmmsg(r0, &(0x7f0000009d00)=[{{&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000003c0)}, {&(0x7f0000000400)=""/140, 0x8c}, {&(0x7f00000004c0)=""/228, 0xe4}, {&(0x7f00000005c0)=""/205, 0xcd}], 0x4}, 0x6}, {{&(0x7f0000000700)=@nl=@unspec, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/58, 0x3a}, {&(0x7f00000017c0)=""/203, 0xcb}], 0x3, &(0x7f0000001900)=""/147, 0x93}, 0x9}, {{&(0x7f00000019c0)=@pppol2tpin6, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/185, 0xb9}, {&(0x7f0000002b00)=""/220, 0xdc}, {&(0x7f0000002c00)=""/23, 0x17}, {&(0x7f0000002c40)=""/141, 0x8d}], 0x5, &(0x7f0000002d80)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000003d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000006240)=[{&(0x7f0000003e00)=""/209, 0xd1}, {&(0x7f0000003f00)=""/33, 0x21}, {&(0x7f0000003f40)=""/76, 0x4c}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/55, 0x37}, {&(0x7f0000005000)=""/243, 0xf3}, {&(0x7f0000005100)=""/4096, 0x1000}, {&(0x7f0000006100)=""/204, 0xcc}, {&(0x7f0000006200)=""/53, 0x35}], 0x9, &(0x7f0000006300)=""/4096, 0x1000}, 0x100000000000000}, {{&(0x7f0000007300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000073c0)=[{&(0x7f0000007380)=""/42, 0x2a}], 0x1, &(0x7f0000007400)=""/238, 0xee}, 0xe78}, {{0x0, 0x0, &(0x7f0000008880)=[{&(0x7f0000007500)=""/203, 0xcb}, {&(0x7f0000007600)=""/4096, 0x1000}, {&(0x7f0000008600)=""/226, 0xe2}, {&(0x7f0000008700)=""/222, 0xde}, {&(0x7f0000008800)=""/127, 0x7f}], 0x5, &(0x7f0000008900)=""/37, 0x25}, 0x9}, {{&(0x7f0000008940)=@tipc, 0x80, &(0x7f0000009c00)=[{&(0x7f00000089c0)=""/105, 0x69}, {&(0x7f0000008a40)=""/76, 0x4c}, {&(0x7f0000008ac0)=""/249, 0xf9}, {&(0x7f0000008bc0)=""/4096, 0x1000}, {&(0x7f0000009bc0)=""/32, 0x20}], 0x5, &(0x7f0000009c80)=""/127, 0x7f}, 0xff}], 0x7, 0x20, 0x0) getresuid(&(0x7f0000009ec0), &(0x7f0000009f00)=0x0, &(0x7f0000009f40)) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000009f80)={{{@in=@remote, @in6=@mcast1, 0x4e20, 0x3f, 0x4e24, 0xffffffffffffffff, 0x0, 0x20, 0x20, 0x33, r3, r4}, {0x7, 0xf891, 0x3, 0xffff, 0x9, 0x6, 0x9, 0xd3f7}, {0xfffffffffffffffe, 0x1, 0x9, 0x4e}, 0x1, 0x6e6bbc, 0x3, 0x1, 0x1}, {{@in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4d3, 0x3c}, 0xa, @in=@multicast2, 0x3500, 0x3, 0x1, 0x4, 0xffe0000000000000, 0x100000000}}, 0xe8) 00:52:38 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200f00, 0x0, 0x0, 0x0) 00:52:38 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x2c501, 0x0) write$P9_RLOCK(r2, &(0x7f0000000300)={0x8, 0x35, 0x1}, 0x8) inotify_add_watch(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x80841, 0x0) inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x140) inotify_add_watch(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r4 = inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x200) inotify_rm_watch(r3, r4) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000240)={0x80000000000000ab, [0x1]}, &(0x7f0000000340)=0x6) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x10000}) 00:52:38 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\t', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) r2 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x7ff, 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000280)={0x0, 0xfffffffffffeffff, 0x0, 0xfffffffffffffffc, 0x7fffffff, 0x3}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000300)={r3, 0x5, 0x5, 0x7f, 0x4, 0xfff}, 0x14) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x1ff, @rand_addr="35eb7d7570f2b79fcec64ec67281f976", 0x10000}}, 0x3, 0x4, 0xf1d7, 0x3f0, 0x5}, &(0x7f0000000140)=0x98) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0)={r5, 0xef4d, 0x4, 0x3, 0xf82a, 0x81}, &(0x7f0000000200)=0x14) [ 687.483132][ T8451] XFS (loop5): Invalid superblock magic number 00:52:38 executing program 2: unshare(0x10000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40000, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:38 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200fbe, 0x0, 0x0, 0x0) 00:52:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x6, 0x1003, 0x0, 0x1, 0x0, 0x0, 0x8}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:39 executing program 4: socketpair(0x8, 0x6, 0x20, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f00000000c0)="2e3e5ac8") pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000140)=0x33a, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x6c, &(0x7f0000000180)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e20, @rand_addr=0x5}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, @in6={0xa, 0x4e20, 0x6, @loopback}, @in={0x2, 0x4e23, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={r4, 0x401}, 0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00000002c0)={0xba82, 0x3, 'client0\x00', 0x0, "7d4278d2620171eb", "8eb2df01848113318860dcd36224ffc2194270bc1a5f42425daf5519f13a966c", 0x1, 0x1399d3e1}) write$P9_RLERRORu(r3, &(0x7f0000000380)={0x19, 0x7, 0x1, {{0xc, 'cgroupvmnet0'}, 0x8}}, 0x19) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}, @dev={0xfe, 0x80, [], 0xd}, @dev={0xfe, 0x80, [], 0x1e}, 0xffffffffffffffc0, 0x8, 0x1ff, 0x100, 0x100, 0x80c00080, r5}) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000480)) bind$inet(r1, &(0x7f00000004c0)={0x2, 0x4e22, @rand_addr=0x7}, 0x10) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vsock\x00', 0x400000, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000540)={r4, 0xef11}, 0x8) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000580)=0x0) get_robust_list(r7, &(0x7f0000000700)=&(0x7f00000006c0)={&(0x7f0000000600)={&(0x7f00000005c0)}, 0x0, &(0x7f0000000680)={&(0x7f0000000640)}}, &(0x7f0000000740)=0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000780)={r4, 0x3395, 0x30, 0x101, 0x1}, &(0x7f00000007c0)=0x18) socketpair(0x10, 0x7, 0x46, &(0x7f0000000800)={0xffffffffffffffff}) process_vm_readv(r7, &(0x7f0000000b00)=[{&(0x7f0000000840)=""/147, 0x93}, {&(0x7f0000000900)=""/232, 0xe8}, {&(0x7f0000000a00)=""/229, 0xe5}], 0x3, &(0x7f0000001cc0)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/115, 0x73}, {&(0x7f0000001bc0)=""/57, 0x39}, {&(0x7f0000001c00)=""/142, 0x8e}], 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000001d00)={0x3dd78796, 0x2, {0x3, 0x3, 0x72f6, 0x1, 0x81}}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000001d80)=0x7fff, 0x4) getuid() accept4$rose(r6, &(0x7f0000001dc0)=@short={0xb, @remote, @netrom, 0x1, @rose}, &(0x7f0000001e00)=0x1c, 0x800) r9 = add_key(&(0x7f0000001e40)='cifs.idmap\x00', &(0x7f0000001e80)={'syz', 0x1}, &(0x7f0000001ec0)="91429440ff98b15387389ad3390da03f75d5d1a102cc0be2dfa6943886dc214e8e6364a889f179e032cbc280c399a903dd3e1bcc97b4e6d64c6d379857e82cdfac47a61ea8080f21d149766c6a919b6538c2613702869b7dea136911e8a3aeaf42ca10cd6770e0c57a8f55c7bfe75edd2567595dde29cdddb942b9f1e6beacff436b7a747976d7dce36f838f3b73855d962bdbd19508abe664ecbcd7e8542b2318474b0d9ca665834126cd3dbea900c06a0d26f6f021e57712df1c037dfff29e04a4c003fdc9a69e2284c43235c04d976db198f7da4c2175c69a9ffb19ca6b3bae692d036ae7c7a5", 0xe8, 0xfffffffffffffffe) clone(0x8000, &(0x7f0000001fc0)="c2b477cab0782def5e1d85575b328141615e768666d2e2c88463c5a852b570e786a0006ead53901fc8c3be2f959ea31bbcea352dd37cc43bdc09ff1789aa86198103d319b3c60ddc165744070ec3a04f3a239a321b8d4530b50d37bd764034927e0587696246b66305857c64ea4a1b9f63e58ab53d28640005bd90a4ce80a5b8e7d2de56fa6f96194fb93ba8bd3ce93cf07b2eec1b50", &(0x7f0000002080), &(0x7f00000020c0), &(0x7f0000002100)="f7062213ed8acb34d58452d6d8f523133d6cccbaaad815007cd3e7722fd6aba29cd2edbef216853815c358363583783b4f8f5d833679bb7bbd27e65d3c4d0ee7c6dcacf831136229d4d1438f98c9ca938f5896") r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000021c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f0000002300)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000022c0)={&(0x7f0000002200)={0x98, r10, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5ae2}]}, @TIPC_NLA_NET={0x64, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MON={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x880}, 0x4004040) ioctl$KDMKTONE(r6, 0x4b30, 0x6) keyctl$revoke(0x3, r9) 00:52:39 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getgroups(0x2, &(0x7f0000001600)=[0xee00, 0x0]) r2 = geteuid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x8, &(0x7f0000001540)=[{&(0x7f00000000c0)="f4056e55dc4a701ccd90161f8bcd01db53c39f198cf472ad8ee6ff9c0e4dfb91b6e94b93eb6c0a48dc4aae06cc65988df7c4daf3ac6ba9b068eaa9898975405caa40ac606232da01e718dede946187ff4f486572f0a6e58973f90b111adcafaf26d4b347e06fcb45e22b730cf6da7d7a2c8af68eb39095b4579d06253b376ecc6adaa171ca6db9e8d7681d5589bed9895e43e70548f3ca572447088b5612b7bb20240f01dc8dda4c901058b35c09a042ed2bc3c015dc5c9c4ea6dfbd35ff0475bf2d204bd672fead2911564d2664ab31e99629004feeaebc88469bcf3b292ea3ae119d8c21614910c7354e08b769174fa6fc6c6473b36354bc2eaece4fc42d538ae3dd636ac7ca77e409b33dbdb4921b80d12eb106a48c832d038d3d4726927746da46f9e24fc5ead140f049afe8fcdcb1ffd599663ef409cc3445e78fdc036fa6c42f4a72ccdd73202b5eb66827b90a1b46529bc2176c016df07372aa7471b598104944b7f1ab92c1574ff6317dd281a9cb32d10a6fd2fdfbf469f29955d18ff8ff988f2b33d6277e93c59c1dbccf762f82490d1c7f9081fa8b7e49df2a8a1d195fb086627316a22143f358cba17f2b66bdda2f6eaf813c0024b7282fc3467b79118188377cd9a06d90b2ae4d18855f440b5a687904ce1eb7813d356c5e440daf0c6ad118651a1b691871f96609c48c341c6207e1da70374abe39b26a73957ff839ec3a186380a1a868be910f06ed714c570624eac65a48793a4b2439dd90ae66c56541d84d007bf41bf6ccfc50afa9c4e071dc99b1e210cc8e71ee5f032d1faf4ee6169fee496635dc824e05cccf709eaa10521e5e809753ab58d403bb52ad108a9b2fe533343a918410ff40ac50c478382ad638299f3979c1f45d432c0e896af55e1e3d15b7ae48a9fa355731e2c953d2f245fbd5e33e11281c4f115d1979b7dce3ab40f781779ad96a12aa6729da657fd1a02d47fd8a9b2d550e347b50a6001a05ba9f39f563687430ae02ac3d730570a03419cc31313d73b6ede6bbe5f03ae57d25d633eca686d4d6c6f346e8a2509612b2c5e2bd3e6371a4c70b1dc4e5b0431d3e94bc260047a27195bc0ab682aabbf901177400ce478726f490137bac9f6ca2dc97e973835acf877188e40f7a4590c5b430860a89c18fea31f62bf45dbb616d933de3c1aa451b9629587652d31b1cb35ac902420694e3aad212321f59547b0e7a1ae8d565a006e9168996d6d37f3e3ba2d371b6613d1fc15725d323969fbf310c25fd13707a690ba3463f09c088408fc55c321f83e38e918a115ba1898d831d6511d849046a6fde8576ca6835c00977a5c3acf8ee680e4c15871b1cc2ebafc38892d9d9bfe1ea23868b07fcfa7233eb10297237f058d167ca04d43c36729d00cb67eff3b0c4030fd3aab532157283f399a567b4e732041db6f07e630101011d7426db84df8257c970698b492ba38a738bee16f82724ffcba059028530942b44307ef1156d5ffa36730c1673bfb8fad51ce065072b059705f4d0cdf1be86b061dd1a4ba173a13389503bbbb728791d694e6dad1a0c687fcd009deef54b0d0857cbbd49a3eb6f5375b9d900a46bb15a9ff84074314e9fec2a22f419443d98e48013efd3edab7c33ecbea7d47de877119bcbbe080ee0feeb586aa7735eb90f6e562eb4a698546066dc9756e1cc3f349dd53bc392709cafc343e240c97879bf5c385cd8f7e68973780d8dc2d7e095fb1585fbb231125280d54866b39a9066efd1512925e1217f9a5206bffbe69e900865e3fba14b2e05d8e1522131c42fe9f1552f339026df4fc09c17c81e1a58c880d3a24abc2366200cd765feebba314945a84513c5e37a609b55adce4d97758ba0345f5dfdaf2252e015e81c2ff206ada5351fac4fcd0b8dffdc5ef93ab8704255996327bfd78905e546fa946dffa0676c975cfd0a94ad62aeda14890b53709f0606096e40be18eb72954706cd54ac43d7543736e1b4f88c1e275db30703938acd5d99b19afa5dae3b6765e2e99b323849e4a4d8ae80b253fb9515b1e0f9477ad5c2c91f31f6ad2d380a39efca753b20ba4218f02398f711a299dacc79169df7b7fbfe0bce8f5924a835d03360e66e7f542d22aaf9c6a28dbc8b798ea6bc5b18a67e97ae5b4565040e2cdd181a9d702b1326caf4d4ea509974b767c9ec9af9eff269fbf2e08815475d0db29ee43bdd4478435c342395e2470a2f5ef005e7b4a47c30b86f85fdd4d231021fb2a28acde729a000c74df15fe755f0e992d16107793199cec51304b53e911d934f779dba7243730d890244b60c5cafb6631fb62a44f2df234a1403bbd261797b6e8c918304cb4b37885f562b77e5a808541c4014643dad71179ce8dffe24231b2d80f9c21a3a2f3bb4fc3b6dfee1c4b7a09da1c4ab55b2321185c98c1ad3c996b29fd54554822c8e8768d5e11c80adc412ef6ee1ed7b5a3b586555e697fdccbbcee6bd5435dc380feedfbb3ad65794f37808ddcee591f0f9e0b207a6a17914f5200204756a87fdad4b55f49ac56beac333fae7dca5c9e9618d874486ff5cb899a7926413b84b2ac6d4e9c61288bf6b9a7476c4d0d959fd3f0e6636e8631d5396118b954ea475ce5ade51a67d6f2538c11b98401ad64c0c9ca1137cf638c9a8111a56004af9ce60cc5fecf35376dba8e6b169d0663a45e5bdc9ac6964c3e3c1ada11e51006fec38f2e82e8e6357270f47c806011c24392aa9353781a80c8dcdc4374623eeba9a5d59c1e5a876dfda821c56e6f13b18b49d56fb8b86415344dc59259f3e093043b1b03da6332b3bf5e853a1060f754b5b8c9bcf4581c154b1c7b491679cb1b941b2911d0d5ee105be5a7fc3d17a47219376e9a9e83c6a753dbc77dd143b1618c935c8a860655ba2368ec5d61a497e4b2d511cdf420321d2d0a4da8da9360797e7e1d985257f552898368512be2f5ccbb44a36946443ebbbbd909ffb5be44425077ba838d508c3a5ee97e13ccde6aef5230c7db523b6ab8b9b0251dcb8096c2efc1701708c63156bef3071fdb550ef3d62ca52ade7013ab1838d47caec4714de7ea21ae15f8fb16ff341b2b289d2f67ca0a5a778e50260955947c1ea52d3e945c439f2f7269769fefc776096994d9c205368226dc59be607fd6ed194f3a0637f8bc226593f42929d02fb4079dbc982fb0f66fcc44161058db57056df33891441979214fa2571f8a6fdba1bd1d27b00ee66b2c92d06ed5c0528d98800bc93958251cf2ae5e5563b4c3af45c147ed8e76bcafc474e71ed802e6ccd4165ab5f9e0078bcd885b4241fa28094b6c9fb8a2383f2233a3eda0c1652f554046bd012653903c33816509e194250b008a7d829c9d516005c5b407ba93db9e4b7e341425135f2d158d2a9be7c16755e354bc395ae35175ea488b41262722388d70462c8093b68289f3c74fa8afa1c1d02bd8fbd216edcbeb1801848f2cec289533e48d7776c4afa83f91e627185ce1b625a2b6daa365261da05731dcf32a60d92b796e4466b801fc80f601911c1b0e31f3b655adba965498cd3c3a405765faf9c5ecadb396f33024f2a53a5b82d9dfc385ce14fae4d6b40c84c7cce7d8674c2f262f4c1359a4bc073afd67ccd3788452f6ff1f7ac491fa8cab66b26a98028931afc5287082a1d7b3aed819d287516bf6f477521abf98d138b1e067578d16a34251d65ad4364358340489dbc11d4ad7517d6e61834f9afec6c2153ba1456ffc78d1ce3ee41930bdea8bdc09b1ee0cb7fbad22dc08e7f860fb09ad6cb904cba4fecde81cb2d9616f1e3ca080a3bfba8a99b9634bf94bd869ebd037f5fb5488abb185da1d4e328ea84f68688dcede065a4c62025f6cc9a79c8b0a7afcaed0d871ff81b64979ba74d53d167688988bf62180b47078621a835d3ccb0119bcb944ff8ad0b837a395a4b7f2aec627414f8b812622631c158da14db7a342db33a12745fe78b30ca9572875d38eee4e5cd7afdd5588baf90e188036e2e394abd84caa559da230f5577370b45020af8fec4ac7b690cf5c6d48318901a407c4f862adde56d9fa2d18a62438ca10eb18fff1c768c8605f899669caa17ffb14635f9c23aae3575d46a7c9a85c8dad252778e074e4b5cdc0cf4ca5a0c90522c1aaa40ca8aad0de56631cbc1063b5f9464bef56d11e07119e869a44e1fb95130bed61e5c3150ad156ca899f89780bfb40da298a106f99363f1866ba9f92946e036023219a7c51d880863762cbf6bd19a59652ce0636bbd6abcb013cdb305f1dc8679cbfbac483a1c6d0f10c289d1d40f41aa9b96e7b252b63dc9a4e81518fd0043345542d6820b50aafda82da3d597d499979f38092ed6ba12f8db00e7d46263ab0cb4187487908cef6ff5fc62a8cb7d8f535b7f35adc5953f7eeafedc809819c5aefe74235b18c8d7d10043b71bdf45932108b3c7da1eca81f27fd7ce8354ee8a800d8691387ee8fab9ce01e86a8bae88c203314a80dea467cc16c5ba2e92903d78210f2fe265582e93fdf47888cb40adb7d2b5e14a1c545a87ddc54e19c77d9bda37c7d746068e7f95ac0984a3fa99cd7be8f309a66884fb84dd93a884ede008c8b6efa1cd86af46e0c8ffb5d8d203a1d22112e5277fefb5c8f1f5b3ce1b6b7025f6789bb3589cec88ddaae4a4e9bce491b5c6a455e3d1502ca3cd48288fd88fa060e321a3caaf5711acccd29a0e84891f2236a87b492c75a0ca42a66b853f846385acc02826f21eaa94834e3ba6c9cb3495737b8c93d79475919e3235757c8e2a1ef0ce2d5bd018bab7444a5bab847c39c3f72c35bd3ff9982ada5893961472475c1a2727c1a9fb4c87f15f2cbb43d2704d878466910a978a9a57055698c5f94546cdd6a35a02b4bc434dd100309d893c3ccd8a99ee5b1f0317158493c8478f34e1b09b4feabe25e4ea2051f027790d9bf7ad535e4cfe28e6325621835440cfc73d23a13f1c3cee771f635b82563f5896cf053bfda993a3103bd58f0704ecaee19dabbff20ce521818af7311263802a669207580ccd400591d7fd6435d5a89203ede617516a4f79ea253b4e08dd9c7a274166dcb407bc36c3baa6f6197a4586bb38cafbc603518febcd89ad7706dfa4b044e8187d93e2a2327747883f172c43973042bbb5a800e7a5381a700745b6262ac106a220e3989abca2cc5d475ceeb8d17c997a3885673ca1c5cdb0f0672fac12806549fee1d4a2d64c6fc6c18f674f8688c10e14f3807a8d87fc00d1d4271855c47c7b9b399a809fba1fce6919f54b88b06029a361c52d1f47ce3164d85c6897e7a98ab9196cb0a4bcb9a4a5deb2f91a2188e6d24646b7f6e71ac1ac31dd03d2f887a380e48308043dd991ee1294b87aa5ffe7a055d827a105b35d5b48b2a381977ff6db47676dfe46d911f990fe5b622e6a4d5e9b4dd6b29a5ba05ecfa2247bf7f78d7fd666d4577dcdbf3be8e5653017e23363634e9cffc2707ec81d1b18a7cd1ef27ab5b81a81e18058c9e377049b28df9c7019806a80dc5beb72fbfcbdf85ed4989f86f82d8b728142ffdfd456860ee2a96dd03ba9478975676ccce50edb072515c364fa0807e46b39362fec9331be408e6ff0007f36599aab6c8a5b9ce5f9044ea2eb87f60b2cb932764d6352364693a9d66c515437e4057b7aee952f0e7fdd95e6e25a5e58fa9f61c7794ba4c4b20fd14c6314b838961be560e9b02247a1a6ef77ddded1524eec705a712b224aa0ce2bfe82993f4c520fd9c18b9cd0f5473098d6fc75db3eb68a4626a2d7e7853133cee19a6c4b581f98c9", 0x1000, 0x57b}, {&(0x7f00000010c0)="c3330809bcdef59e9e6a619e9937a9bcc4def3bad950167b417b343652e0ddf6075ed8d4527783b4cbfdb6538d11ff60d63aa5791392bb4a0ede97a281eb69b11f11427d4091c11b8effabdf752602ef00e253c6c1891f9c59fc98edea", 0x5d, 0x3f}, {&(0x7f0000001140)="e1b152a047a502eb1815f4e6d59192e33f15d49dd71ad6be21529332f77ee2dac299cdf2cc27b5b9f6a2d22c2e269cc0772c738e143ce8b38d6f070ef704414cd769a766aba8fa151b4e1ffc2325aa90c9f7255d242afb0eb22106eb05a85cdc75c73836ab09b0bae2f8576b584f4ebe45818a81e7c61b6a64990238fa6b2179f2b7d724815571d4fa9b2a94230ce8", 0x8f, 0x2}, {&(0x7f0000001200)="bcece74d4b100811c33da7ea6bb7bbdaf6540fe014ba1b22ca6810d2a27162e942191c2dc5c91bcd4bc762aa34bb21", 0x2f, 0x40}, {&(0x7f0000001240)="31aebf36584d95354a685866cdd5817e8a0c23baa5700c01f0e087b688d1ac9d1d9e6064400af6a36df5fc69c357602086fd7204018a137b214efbffc605c2d46c48acfdcafa6e65977ca0d13075c856e95bc7b61a6fc6b6b647d8a2bd130e526a55d6be57c650a0bf5440efd05d9faf689c9f4b83fa9cf7e65684c9184e986d6bad18bd77826dd0bdbe79", 0x8b, 0x8}, {&(0x7f0000001300)="bfb68a561b65b86bfeb2a03d449f53c967d1631e30af5752a66aee63981181c40ba8d4c0c77a6ff2d7b6ed3a1dffe69c6788e6e6a45eea58b755f9828fc36eaf676a27d021de000950fc0584a723f72327580db25961ca6d32edb16708089324da3bf5ec113114409bb56c111c2ba60d53fe7b290352cdf4f0ab915c5feed25851971dde7fc8032b03c4b225f41947c37ec054f77f8eca8a3d4aea90da687b133dffcea1a88fda16b1c047b71239709c78b38036c0665bfe45035d9fda144cf0fd78fa804efb7696dd770bd6efdbe9a5a5d595b11247a220f8f7b3ff914fe42b71", 0xe1, 0x5}, {&(0x7f0000001400)="4341d2232461398838f8481ce8878e97808ac87d3c18fc4d5f6b5ebe2870bcd6d36dfc2db872739ef694536270f223dabe92e497bb277a166235c43045e5694ef578971d8935d1f9f17f37e9fdaf2efd61dec4e53e5e4cbe050eee928f9e7305a6d6511da83a5338a68dc84bfa1cecb32a56e80a2c03006deb5f8fb9bc091cac6689590ab757c6d9a665bcdcb22c9c79d99dee677c3da499c52a23fc7e7526c78f1a3fb46948dcf2db5c06ec0d3bb5eb794ed5ba37b857efaeea780fd275e3da6a52", 0xc2, 0x209}, {&(0x7f0000001500)="8beba9f643768a63845e00d347ad6fa16ade5991b463acc12a0cc30c2655c590b59864cefdaa4d8c5479e80c5f4a45a1", 0x30, 0x2}], 0x20000, &(0x7f0000001640)={[{@session={'session', 0x3d, 0x3}}, {@gid={'gid', 0x3d, r1}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@umask={'umask'}}, {@codepage={'codepage', 0x3d, 'iso8859-1'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'selfnodevlo'}}, {@fsname={'fsname', 0x3d, 'GPL.'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x77, 0x34, 0x35, 0x37, 0x0, 0x34, 0x36], 0x2d, [0x33, 0x75, 0x73, 0x37], 0x2d, [0x37, 0x77, 0x66, 0x7f], 0x2d, [0x63, 0x31, 0x37, 0x77], 0x2d, [0x77, 0x67, 0x3f, 0x3c, 0x63, 0x62, 0x77, 0x7d]}}}, {@hash='hash'}, {@fsname={'fsname', 0x3d, '&#.self'}}, {@uid_gt={'uid>', r2}}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) 00:52:39 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x10', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xff2f, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x13}) 00:52:39 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201100, 0x0, 0x0, 0x0) 00:52:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x18, 0x6400) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000400)=0xe8) write$P9_RSTATu(r1, &(0x7f0000000340)={0x69, 0x7d, 0x1, {{0x0, 0x54, 0x3, 0x80, {0x11, 0x4, 0x1}, 0x8080000, 0x7fff, 0x1, 0x5, 0xc, 'eth1trusted-', 0x6, 'vmnet1', 0x5, 'nodev', 0xa, '/dev/ptmx\x00'}, 0x0, '', r2, r3, r4}}, 0x69) r5 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000040)={0x13}) [ 688.366765][ T8607] XFS (loop5): Invalid superblock magic number 00:52:39 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000000100)) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xff, 0x8000) ioctl$KIOCSOUND(r1, 0x4b2f, 0xffff) accept4(r0, 0x0, 0x0, 0x0) 00:52:39 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:39 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc0000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@bridge_setlink={0x288, 0x13, 0x300, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x8000, 0x20}, [@IFLA_IFALIASn={0x4}, @IFLA_WEIGHT={0x8, 0xf, 0x8}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}, @IFLA_PHYS_PORT_ID={0x14, 0x22, "fc62bc04b63ecdd68f516e3881ec"}, @IFLA_LINKINFO={0xa4, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x94, 0x2, [@IFLA_IPTUN_PROTO={0x8}, @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@IFLA_IPTUN_ENCAP_LIMIT={0x8, 0x6, 0xc2}, @tunl_policy=[@IFLA_IPTUN_COLLECT_METADATA={0x4}], @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x80000000}, @tunl_policy=[@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x10, 0xfffffffffffffffa}, @IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x10, 0x3}], @IFLA_IPTUN_ENCAP_LIMIT={0x8, 0x6, 0x674b}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @IFLA_IPTUN_ENCAP_LIMIT={0x8, 0x6, 0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8, 0x6, 0xff}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @local}], @tunl6_policy, @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x15}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x3b}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy]}}}, @IFLA_LINKINFO={0x20, 0x12, @bond_slave={{0x10, 0x1, 'bond_slave\x00'}, {0xc, 0x5, @IFLA_BOND_SLAVE_QUEUE_ID={0x8, 0x5, 0x40}}}}, @IFLA_VF_PORTS={0x148, 0x18, [{0x44, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "075b6844a3a9bd2fd09c318058a6fccf"}, @IFLA_PORT_PROFILE={0x24, 0x2, '/-@vboxnet0GPLcpuset][trusted\x00'}]}, {0x38, 0x1, [@IFLA_PORT_REQUEST={0x8, 0x6, 0x40}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0de6daa3cafc12cfe9a1755f490c8928"}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_PROFILE={0x10, 0x2, '/dev/ptmx\x00'}]}, {0x40, 0x1, [@IFLA_PORT_PROFILE={0x10, 0x2, '/dev/ptmx\x00'}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6171a044512e32dc13bdc67672f3e881"}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x1}, @IFLA_PORT_VF={0x8, 0x1, 0x3}]}, {0x58, 0x1, [@IFLA_PORT_REQUEST={0x8, 0x6, 0x100000001}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x7f}, @IFLA_PORT_VF={0x8, 0x1, 0x800}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7c8ff77f049a31470fec2717023aa3ac"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0d9d2ae462b76c5bb70284844552a062"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2f18cb377448c222bcb1b295a0a33703"}]}, {0x30, 0x1, [@IFLA_PORT_REQUEST={0x8, 0x6, 0x80000000}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8a2635f4c5db231d7932d4b01a7a0842"}, @IFLA_PORT_VF={0x8, 0x1, 0x8001}, @IFLA_PORT_VF={0x8, 0x1, 0x4}]}]}, @IFLA_LINKINFO={0x2c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x1c, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x8, 0x1b, 0xca}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}]}}}, @IFLA_PROTO_DOWN={0x8, 0x27, 0x29}]}, 0x288}, 0x1, 0x0, 0x0, 0x1}, 0x8004) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000040)={0x13}) 00:52:39 executing program 4: socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xffff, 0x5, 0x200000000001, 0xf6eaa0b989d0701e, 0xddd, 0xf2}, 0xfffffffffffffc5c) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000140)='./file0/file0\x00') umount2(&(0x7f0000000080)='./file0/file0\x00', 0x4) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000540)=0xe8) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000240)='/dev/loop0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='fuseblk\x00', 0x5400, &(0x7f0000000600)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xd000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}], [{@dont_hash='dont_hash'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsfloor={'smackfsfloor'}}, {@dont_hash='dont_hash'}, {@fowner_gt={'fowner>', r4}}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, 'ramfs\x00'}}, {@subj_role={'subj_role', 0x3d, 'ramfs\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ramfs\x00'}}, {@uid_gt={'uid>', r5}}]}}) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000780)) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000740)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) umount2(&(0x7f0000000200)='./file0/file0\x00', 0x0) 00:52:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0xff) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) [ 688.912162][ T8862] XFS (loop5): Invalid superblock magic number 00:52:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:40 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x210000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000000000000061122000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0xb}, 0x48) 00:52:40 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201200, 0x0, 0x0, 0x0) 00:52:40 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p ', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x80000000, 0x400200) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) rt_sigprocmask(0x1, &(0x7f00000001c0), 0x0, 0x8) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r2, r3, 0x8000, 0x1000, &(0x7f0000000640)="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", 0x8e0, 0xfff, 0x10001, 0xb7, 0x4, 0x2, 0x7f, 'syz1\x00'}) r4 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x13}) 00:52:40 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x2001, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000140)) mmap(&(0x7f000028c000/0x1000)=nil, 0x1000, 0x2000000, 0x10, 0xffffffffffffffff, 0x0) flock(r0, 0xf) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) syz_open_procfs(0x0, 0x0) mlockall(0x400000003) prctl$PR_GET_UNALIGN(0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:52:40 executing program 3: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000001c0)={0x3f, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x30000, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000080)="3f48f33293d006b25f61f29cc508c7a2760f6ad9e05b129dd47efd6cb4a51eea1e40f074") ioctl$RTC_PIE_OFF(r0, 0x7006) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000600)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x13}) 00:52:40 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 689.582107][ T8885] XFS (loop5): Invalid superblock magic number 00:52:40 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201300, 0x0, 0x0, 0x0) 00:52:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x1, 0x800) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0x60, 0x80000) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000300)={r2, 0x7, 0x94ee, "025866467e6130e3aa8a5f02f14c1d39c63758ece805bbf5c2261b6c9d1524453956838762b135bcb6125723a54f7a56865dc273"}) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x13}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:52:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x5) sendto$inet(r0, 0x0, 0xffffffffffffff89, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x10084e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x4, 0x400, 0x7fffffff, 0x9}, {0x3, 0x7, 0x4, 0x5}, {0x20, 0x654a212, 0x2, 0x6}, {0x6, 0x9, 0x5, 0x80000000}, {0x1, 0x2, 0x4, 0x66}]}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xc2b}, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) 00:52:41 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x10', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@nl=@proc, &(0x7f0000000000)=0x80, 0x80000) r3 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x101000) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x1, 0x6}}, 0x30) setsockopt$inet6_int(r2, 0x29, 0xcb, &(0x7f0000000100)=0x3ff, 0x4) 00:52:41 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201400, 0x0, 0x0, 0x0) 00:52:41 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="39000000130009006900000000000000ab0080480b00000046000107000000141900040000000100010003f5169dcd4a77282b0bdca4000000", 0xfffffffffffffdf0}], 0x1) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x6, 0x2000) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x9, 0x3}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x4a01, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x44000) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ptrace(0x18, r3) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000140)=""/152) 00:52:41 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\xc0', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:41 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x200000) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x5, 0x4) r1 = eventfd2(0x0, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 00:52:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) [ 690.511120][ T9060] XFS (loop5): Invalid superblock magic number 00:52:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000180)={"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"}) r4 = gettid() r5 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f0000000000)={r0, r3, 0x9}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_procfs$namespace(r4, &(0x7f0000000080)='ns/user\x00') 00:52:41 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201500, 0x0, 0x0, 0x0) 00:52:41 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\xa0', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) [ 691.040479][ T9323] XFS (loop5): Invalid superblock magic number 00:52:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:42 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = dup2(r0, r0) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="181b00b6", @ANYRES32=r1, @ANYBLOB="0000000000000000180000000600000000000000008000009500000000000000"], &(0x7f0000000000)='G.\xdd:@\x83\xb90PL\x00', 0x8000, 0x1000, &(0x7f000062b000)=""/4096, 0x40f00, 0x1}, 0x48) fsetxattr$security_evm(r1, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000200)=@v2={0x7, 0x2, 0x11, 0x7fff, 0xde, "03ee776ee20ed743096c888e84cfafdc221c84bc7e39b6117762abc0b4e7d6604d2c69547422402f4c8978a7bf548c76188ae51fb2bc8f18e63013e09f264862b7955af38584422da5f7b10645ece9296b30f812cdce194912d7f9429537a66079b97cca353fddae58735afc23ab5cac7b10d109c2243e4d74d1776ce89a1850c8df7d9f1611e54067f85d7682ca8c44073938e5fa7f51ffc076199e5cab6ca2edc1bb8a71b2a1544c24ddfecfb50affdacca2283af0fd34804d47db175c97de6c3750609f8c1242a980a5a2eb37080fa0cd7149ccbaa57f68be3fe6dd8f"}, 0xe8, 0x3) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000100)) 00:52:42 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x3, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c06, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x3, 0x0, [{}, {}, {}]}) 00:52:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, {0xa, 0x4e24, 0x20, @dev={0xfe, 0x80, [], 0x24}, 0x3ff}, 0x1, [0x96, 0x7, 0x1, 0x9, 0x1, 0x7, 0x3f, 0x3]}, 0x5c) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:42 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\xff', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:42 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201600, 0x0, 0x0, 0x0) 00:52:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x80000) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) fcntl$getflags(r1, 0x409) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0xa0400, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)={0x12cc, 0x14, 0x10, 0x70bd26, 0x25dfdbfc, {0x12}, [@nested={0x11d0, 0x6f, [@generic="131f739d3f5259177ce5df961f3cb1ce888b0e1202392fdb8ef65b4f5a3c95bf4ec33d79d00f328b9e59f71c3022e92c29ad8b9346543d12e9a37290c516b11234705e46896627d49e59ac1c48f1c3fa69ca403be3eca92d8256f03a55e4ed993415bd376f999933", @generic="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", @generic="7e71e8b78423b84352c59d5920d673250a4252dac0aa16f8945dc51def4b18c5343a7a9bd3ad5c68ad3196bc523e460587fc0a520b4e01600e53087e935e2d9b65f0a81e64f42d33f30c574fbe2176ee724b458bf332ddb8c0f17399d9e4335f6ed042e376e1e86093da12960237130f2a9e25f183b5fa7d11413cfc7d7f8120f7a85ec73cb68641ad8ad27e9537686eef048329ae1c2c304a28adc52f146e2be4c264170af2b928177be8d2dd961af4b0f366485065ddee6f412978fd8741211082fbe67a2c5f8e6760ed7ffd", @generic="f06f2afeccfc9958d4f858c568ac6e4f4d54d3b5a925d40d02fbaace65f9aff1657724f8f13ca68d2590c26dfdf6ffe1d199b4de0329ef3c83dfe22ddec2494ca8916efcdede95c15cc132649a50c832504d27d3f6bba99c9e3c7d825f0ed50827129f0e22ea3bedde1c740c1bfe212a05b0d58888d11d41bfd5a5a674bfd5d51917a6322f978e1f8987230bb7f2d40580259cc5"]}, @generic="d29d501b67935dd186a6dcfb1c19e39b0221d7e3722e88ebf7f999d3c5c5b76128ae1e520863e590f708f9d5a8d9cb351824eb95a03a5bf13087dffd9c6c12e157a2c04ff4dabb4439ad707423269a79a7f6bcac0122182bbe72becd5f745ebcd1ac927163d909254c4e55fee5be2aa78e22417c3234a6fc76bdd9ee5bad1803e4ee426d57a505f80260af71473ecdfb203d0ae31feb079a4f0ecf28cd67c2397236b7f8891bfa522dd1d762041f8e90a4b4579d88442d68763f62ea2a4c42b03ab5ab636f81651da0d5d5ca809b4b01647ca25349ff665698c10509e7dd201426d0702ddc16"]}, 0x12cc}, 0x1, 0x0, 0x0, 0x80}, 0x880) 00:52:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x13, 0x0, 0xfffffffffffffffe, 0x0, 0x19}) prctl$PR_SET_FP_MODE(0x2d, 0x2) 00:52:42 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:42 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000280)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x5, 0x0, 0x0, 0x3, 0x10000000200}) dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, 0x0) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000540)={0x7, 0x7f, 0x1}, 0x7) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x13ccf2cb1f2c2dd6) timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) [ 691.745549][ T9400] XFS (loop5): Invalid superblock magic number 00:52:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f00000003c0)) sendto$inet(r2, 0x0, 0x484, 0x200007fa, &(0x7f00000004c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendfile(r2, r2, &(0x7f00000002c0), 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000500)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f0000000780)='/dev/loop#\x00', 0x1, 0x0) r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80386433, &(0x7f0000000680)=""/227) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000280)={0x0, 0x7d}) add_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x7, 0x10}, &(0x7f0000000580)=0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000040)={r5, 0xa5}, &(0x7f0000000240)=0x8) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x2842, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000000380)) ioctl$TIOCGETD(r4, 0x5424, &(0x7f0000000340)) geteuid() mq_getsetattr(r1, &(0x7f0000000000)={0x1f, 0x6, 0x800, 0x4, 0x3, 0x1, 0x7fffffff, 0x10}, &(0x7f0000000300)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@broadcast}}}, &(0x7f0000000b00)=0xe8) r6 = memfd_create(&(0x7f00000000c0)='/dev/loop#\x00', 0x0) pwritev(r6, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0x72ea, @rand_addr="18f4c0116a9c15eb7b41029d78da494d"}], 0x2c) prctl$PR_GET_FP_MODE(0x2e) sendfile(r2, r3, 0x0, 0x102000002) 00:52:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x2}) r2 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x1, 0x20000) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000080)={0x14, "e304acb505dc34f2dd6ea5c7ef40cebbb1ff2f70c4eb953c82ce4bfea7203e7a", 0x1080, 0x7ff0000, 0xffffffffffffff80, 0x4, 0x3}) [ 692.162577][ T9592] XFS (loop5): Invalid superblock magic number 00:52:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:43 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:43 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201700, 0x0, 0x0, 0x0) 00:52:43 executing program 4: getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000100)=0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000080)=0x4, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000040)=0x9, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f000000d8c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x517, 0x40) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200), 0x10) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000180)={0x59, "210afdefdf65de68ff19aa8658b40227f69356f78d33835679b5fc2e0f66f70a1dc3c9f149981d96b6521dfa3e88d60768570be9355402018620921ad5131e58b2eed2d209eceae54e75c37b7507bc3adecaae94796c25a6b3"}) r1 = request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='/dev/midi#\x00', 0xfffffffffffffff8) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000300)='.dead\x00', &(0x7f00000003c0)=@keyring={'key_or_keyring:', r2}) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f00000000c0)={0x10000, 0x13000, 0xafe8, 0x9, 0x80}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10062, 0x0, 0x0) 00:52:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) r2 = syz_open_pts(r0, 0x805) r3 = dup3(r2, r0, 0x0) write$UHID_INPUT(r3, &(0x7f00000036c0)={0x8, "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", 0x1000}, 0xda70a876) 00:52:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0xfffffffffffffff8}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x10002) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000080)={0x6, 0x800006, 0xb}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:43 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:43 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x0) ioctl(r0, 0xc0984124, 0x0) 00:52:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:43 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x5c56cdb8, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000200)=0xf000) write$FUSE_STATFS(r0, &(0x7f00000000c0)={0x60, 0xffffffffffffffff, 0x1, {{0x0, 0x80000000, 0x6, 0x3, 0xfffffffffffffffe, 0xffff, 0x7, 0x9}}}, 0x60) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000040)={0x4}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc008561b, &(0x7f0000000140)={0xfffffffffffffffe}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x4}) open_by_handle_at(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x40000) 00:52:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) clock_adjtime(0x6, &(0x7f0000000200)={0x6, 0x1b, 0x7, 0x2, 0x100000, 0x7ff, 0x3f8, 0x0, 0x400, 0x3ff, 0x10000, 0x81, 0x80000001, 0x8, 0xdf, 0x100, 0x8, 0x4606326d, 0x9, 0x3, 0x7, 0x0, 0xffffffff, 0x100000000, 0x20000000000, 0x7}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f0000000080)=""/140, &(0x7f0000000000)=0x8c) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x13}) getsockopt$sock_buf(r1, 0x1, 0x0, &(0x7f0000000140)=""/96, &(0x7f00000001c0)=0x60) [ 692.862798][ T9671] XFS (loop5): Invalid superblock magic number 00:52:44 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000240)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) mkdirat(r0, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ubi_ctrl\x00', 0x80, 0x0) mkdir(&(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xfffffffffffffffe) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000180)) getsockname(r0, &(0x7f0000000240)=@hci, &(0x7f0000000040)=0x80) [ 693.353866][ T9865] XFS (loop5): Invalid superblock magic number 00:52:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:44 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:44 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201800, 0x0, 0x0, 0x0) 00:52:44 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$rose(r0, &(0x7f0000000080)=@full={0xb, @dev, @null, 0x0, [@null, @remote, @null, @remote, @default, @netrom]}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x13}) 00:52:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8104000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, r2, 0x302, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffffd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x180, r2, 0x42c, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x26}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK={0x8c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffff00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x44}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x54, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000001c0)=""/107) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000006000000000000000000000046b300dfec001800000a51654ba11225f999b91fc9de9528a7a000010001cee570551ad0c459d5719705123ebc990de605f4d017acb4ffb0255246c389d0c803f3c79f12fd5c865a82095e99"], 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') openat(r3, &(0x7f0000000380)='./file0\x00', 0x80, 0xcc) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r4, 0x12, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0xc, 0x13, @l2={'ib', 0x3a, 'bpq0\x00'}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) 00:52:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x705102, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x13}) 00:52:45 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:45 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xd7) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x1000001c3) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000240)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4f3d1d6e) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) mkdirat(r0, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ubi_ctrl\x00', 0x80, 0x0) mkdir(&(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xfffffffffffffffe) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000180)) getsockname(r0, &(0x7f0000000240)=@hci, &(0x7f0000000040)=0x80) 00:52:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x80000000000006}]}, 0x10) [ 694.033996][ T9932] XFS (loop5): Invalid superblock magic number 00:52:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7fff, 0x0, 0xff, 0x3, 0x1, 0x100000000, 0xea43, 0x0, 0xffffffffffffff76, 0x2, 0x3, 0x7f}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:45 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:45 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201900, 0x0, 0x0, 0x0) 00:52:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x20, 0x80) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4}}, &(0x7f0000000100)=0xe8) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000c40ff8)={0x1}, 0x8, 0x0) msgrcv(r4, &(0x7f0000000040), 0x8, 0xfffffffffffffffc, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40008}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x148, 0x1d, 0x1, 0x70bd29, 0x25dfdbfc, {0x1d}, [@typed={0x8, 0x3b, @uid=r3}, @typed={0xc, 0x81, @u64=0x4}, @generic="cba81e1c3b2a8d4372e3aa22b11c80511d480b81af94ebc6184d08d02ef2464e27b6694ffab3faf225d15d224cc30d4c52c4d659b053ea62d35f9d1c5787d6b46b7c946ec2ec1dcdd614c271ff0bea0b31f7a30058197ba89c97475787edbfabba85c72d526e2a6ed3a478fd8da1d561d8fa2a06b29fce8fa7b26882d47648fb9791707c7e1d71ef12f96d8dc58fa08603b689c14df467b47ded402c0cf0108222e66a15abf58776940d4c20c5bdc43e81651aac78bb156355995bf32bc8d61ad801496387", @generic="10d0b26c41ccd18c365d2cc3ada7706f3ff9e08a89a1cb5d34e79073df5d9f7e37ae451c209387e6a22bbf872d24192c12fcbd53805b2372d43df6e46b90291f8cc42117d7338dd1d03eb9639bb26403a9105cf547089a523abc0b"]}, 0x148}}, 0x4000000) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0xe000, 0x3, 0x8, 0x8001}) 00:52:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x60702, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000200000000000000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000900030000000400000001000000000000001cd00000000000000100010000003b080000000000000000000000000000000000000000000000000000000000000000010000000180ffff0180000000000000000100000000000093000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000dda42f2800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000300)={0x7a, 0x0, [0x20e, 0x7fc]}) openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x200000, 0x0) 00:52:45 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:45 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201a00, 0x0, 0x0, 0x0) 00:52:46 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\xff', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20c00, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x2bc, r3, 0x9, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb9e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff7a8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4010000}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x9}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc000000}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2393}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x35a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd3a0}]}]}, 0x2bc}}, 0x800) 00:52:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000001c0)=@ipx, 0x80, 0x0, 0x15e}}], 0x3fffffffffffc8c, 0x40000000, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) preadv(r1, &(0x7f00000009c0)=[{0x0}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f00000005c0)=""/214, 0xd6}, {&(0x7f00000006c0)=""/194, 0xc2}, {&(0x7f00000007c0)=""/146, 0x92}, {&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000480)=""/13, 0xd}, {&(0x7f0000000940)=""/71, 0x47}], 0x8, 0x0) 00:52:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x21a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffcbc) [ 695.061927][T10298] XFS (loop5): Invalid superblock magic number 00:52:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) nanosleep(&(0x7f0000000000), &(0x7f0000000080)) 00:52:46 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201b00, 0x0, 0x0, 0x0) 00:52:46 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:46 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x5, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='7']}) close(r3) close(r2) 00:52:46 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:46 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0x0, 0x0, [0x9, 0x0, 0x7, 0x3f]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x33e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 00:52:46 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201c00, 0x0, 0x0, 0x0) 00:52:46 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\xff', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x31) 00:52:47 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x3, 0x5, 0x3, 0x40, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_ident={0x2, 0xb, 0x8}, @sadb_x_sec_ctx={0x16, 0x18, 0x9fb, 0x5, 0xa1, "7679e06aa58ffb0cae84cf66ddbb9ea6eb5aa6ad7dd999c183bb4db25bb7fd0b6fdb7fcb7860dc13a88a5285ad3ae1730fd8891a2f0cc75f20e081405157f987848ae57c2803130c3ad88ecdf699011775d267752034321f9987e56c9f4b94c34426326b0cbe72bb6f4b24eeac026f939fddf265048a5a0eb8a9e4586dbcc762f2b2b20121d90a75cb6dcbac08093613f65f925e1daa913a155cf2e76c5b103681"}, @sadb_key={0x1e, 0x9, 0x738, 0x0, "7c0add0e3905516e1ca8d3c3ae28614b55b56475770bacf1e6b41ae53b934b3997b8466e2af79aafa4e71039adfbd1a4c9b69335abb7e095957dac66feea166c1032b05feebefa9a923610ec4ebfbeac507c48c737e1e6f8b9b33d52a72339dd5e9581b3b98b3f1cccbb3213f18012218003f3ab8ad86e910d42cf0063ffe7dcb287d8dbb6dfc0508f4f5fcdc96733ce786eca613ba6f83fa8c4555b78d10ba28bdd5b19394ad33089e1b4d1df9a206ce8980b0abf73769594862801b15bd2cfc928a2c7c18c7833ea933899bd20ff405666b1310d2286178de2918c24d858398371286dea8124"}, @sadb_address={0x5, 0x7, 0x3f, 0xa0, 0x0, @in6={0xa, 0x4e21, 0x5, @ipv4={[], [], @local}, 0x2}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_ident={0x2, 0xa, 0x80, 0x0, 0x7}]}, 0x200}}, 0x40011) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x31, 0x23, 0x8, 0x3, 0xa, 0x401, 0x1, 0xa3, 0x1}}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x00\x00\x02\x00\x00\x05\x00', 0x79}) 00:52:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="ab0b0aae918d69cb6070309ba9b055e106d4d6e420e91c5974700000", @ANYRES16=r2, @ANYBLOB="000428bd7000fedbdf250300000014000100fe8000000000000000000000000000aa14000100ff0200000000000000000000000000010800060004000000080002007f0c0000080006000000000008000500010000001400040009000000ffffffff030000004c0a00000800020006000000"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x4}}}, 0x24}}, 0x0) [ 695.949791][T10514] XFS (loop5): Invalid superblock magic number 00:52:47 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\xff', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x801, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000080)={0xa3, 0x0, [], {0x0, @reserved}}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x13}) 00:52:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = syz_init_net_socket$llc(0x1a, 0x4000000002, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r2 = dup3(r0, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) 00:52:47 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201d00, 0x0, 0x0, 0x0) 00:52:47 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x3, 0x5, 0x3, 0x40, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_ident={0x2, 0xb, 0x8}, @sadb_x_sec_ctx={0x16, 0x18, 0x9fb, 0x5, 0xa1, "7679e06aa58ffb0cae84cf66ddbb9ea6eb5aa6ad7dd999c183bb4db25bb7fd0b6fdb7fcb7860dc13a88a5285ad3ae1730fd8891a2f0cc75f20e081405157f987848ae57c2803130c3ad88ecdf699011775d267752034321f9987e56c9f4b94c34426326b0cbe72bb6f4b24eeac026f939fddf265048a5a0eb8a9e4586dbcc762f2b2b20121d90a75cb6dcbac08093613f65f925e1daa913a155cf2e76c5b103681"}, @sadb_key={0x1e, 0x9, 0x738, 0x0, "7c0add0e3905516e1ca8d3c3ae28614b55b56475770bacf1e6b41ae53b934b3997b8466e2af79aafa4e71039adfbd1a4c9b69335abb7e095957dac66feea166c1032b05feebefa9a923610ec4ebfbeac507c48c737e1e6f8b9b33d52a72339dd5e9581b3b98b3f1cccbb3213f18012218003f3ab8ad86e910d42cf0063ffe7dcb287d8dbb6dfc0508f4f5fcdc96733ce786eca613ba6f83fa8c4555b78d10ba28bdd5b19394ad33089e1b4d1df9a206ce8980b0abf73769594862801b15bd2cfc928a2c7c18c7833ea933899bd20ff405666b1310d2286178de2918c24d858398371286dea8124"}, @sadb_address={0x5, 0x7, 0x3f, 0xa0, 0x0, @in6={0xa, 0x4e21, 0x5, @ipv4={[], [], @local}, 0x2}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_ident={0x2, 0xa, 0x80, 0x0, 0x7}]}, 0x200}}, 0x40011) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x31, 0x23, 0x8, 0x3, 0xa, 0x401, 0x1, 0xa3, 0x1}}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x00\x00\x02\x00\x00\x05\x00', 0x79}) 00:52:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x328, 0x198, 0x0, 0x0, 0x198, 0xd8, 0x290, 0x290, 0x290, 0x290, 0x290, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x98, 0xd8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7, 0x200, 0x5, 0x13, 0x3, 0x0, 0x2, 0x6]}}}, {{@ip={@multicast1, @broadcast, 0xff, 0xffffff00, 'veth1_to_bond\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x11, 0x1, 0x1c}, 0x0, 0x98, 0xc0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x8, 0x2}}}, {{@ip={@loopback, @broadcast, 0xffffffff, 0x2b3496d026c3e37, 'hsr0\x00', 'team0\x00', {0xff}, {0xff}, 0x8, 0x2, 0x41}, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x5, [0x0, 0x3, 0x530ac876, 0xfffffffffffffffd, 0x3, 0x2], 0x8, 0x1}, {0x3ff, [0x1ff, 0x6, 0x8, 0x4, 0x100000000, 0x401], 0x8, 0x100}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) ioctl$KDENABIO(r0, 0x4b36) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x13}) 00:52:47 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:47 executing program 4: capset(&(0x7f0000002ffa)={0x20080d22}, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, 0x2c) 00:52:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000000)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) getpid() prctl$PR_SET_FP_MODE(0x2d, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, 0x0) write$FUSE_LSEEK(r1, 0x0, 0x0) eventfd(0x7) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x01\a\x00\x00\x00L\x01\x00', @ifru_names='bond_slave_1\x00'}) 00:52:47 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201e00, 0x0, 0x0, 0x0) 00:52:47 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xa66, 0x1, 0x9}}) r1 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x3f, 0x501800) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xfffffffffffffff9, &(0x7f0000000240)={&(0x7f0000000140)={0xfffffdba, r2, 0xf15, 0x70bd2c, 0x25dfdc00, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x8810) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000280)=@v1={0x1000000, [{0x5, 0x3f}]}, 0xc, 0x0) r3 = getpgrp(0x0) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x0, r3}) 00:52:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x82, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={0x1, @bcast, @rose={'rose', 0x0}, 0xf8f9, 'syz1\x00', @null, 0x9, 0x2, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) 00:52:47 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 696.806755][T10794] device bond_slave_1 entered promiscuous mode [ 696.848773][T10794] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 696.892311][T10814] QAT: Invalid ioctl [ 696.898081][T10816] bond0: Error: Device is in use and cannot be enslaved [ 696.906154][T10798] XFS (loop5): Invalid superblock magic number 00:52:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000000)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) getpid() prctl$PR_SET_FP_MODE(0x2d, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, 0x0) write$FUSE_LSEEK(r1, 0x0, 0x0) eventfd(0x7) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x01\a\x00\x00\x00L\x01\x00', @ifru_names='bond_slave_1\x00'}) 00:52:48 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201f00, 0x0, 0x0, 0x0) 00:52:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) sched_setscheduler(r2, 0x6, &(0x7f0000000080)=0x1) [ 697.091606][T10926] bond0: Error: Device is in use and cannot be enslaved [ 697.298135][T10795] XFS (loop5): Invalid superblock magic number 00:52:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:48 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="0800000019000100edfff6ff800001000200dc060d045cdc8df7ee9c920b1739b47416ebf2b7f282cc392454659bf421c2b9a7e676e5f4a4fac5a6f1825aaf79dfd714d672daa67ac496af07978cb7a25511d2aa579342238c1a8b050789754bc51cb6c097e64aec743f4595c4c468bd63542d029cd9a88ce6fc241c674f83e7a8a7fb7ac7fcec3d2ae043161240ba88c0b4ab26ace7a438da3cd26b3b57b8964e647bf94a965ae340ed2552badd7a4c0dab231cc453de6d631fd91c0b9dde6bfb3a346d32bcb4b8"], &(0x7f0000000280)=0x14) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3f, 0x80000) fstat(r1, &(0x7f0000000140)) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)={@mcast1}, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000000000)={{0x7, @addr=0x200}, 0x8, 0x0, 0x9}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb94, 0x0, 0xd}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2ab"]}]}, 0x1c}}, 0x0) 00:52:48 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x7f', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:48 executing program 2: socket$bt_rfcomm(0x1f, 0x3, 0x3) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x832c, 0x100) ioctl$CAPI_INSTALLED(r1, 0x80024322) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket(0x1, 0x3, 0x4) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)={0x0, @aes256, 0x1, "0ef38e0c2da4886f"}) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000140)=""/57, &(0x7f0000000180)=0x39) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) msgget$private(0x0, 0x0) lseek(r1, 0x0, 0x1) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0)=0x6, 0x4) 00:52:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4d0000, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x14, 0x1}, 0xef88}}, 0x18) socket$pppoe(0x18, 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0x4, @sliced={0x81, [0xff, 0x0, 0x2, 0x2, 0x7fe, 0x8, 0x6, 0x20, 0x89e, 0xff, 0x0, 0x6, 0x4, 0xd05a, 0xfff, 0x7, 0x7, 0x8000, 0xbe6, 0x100, 0x5, 0xc, 0x2396, 0x145, 0x5, 0x4, 0x55, 0xfffffffffffffff7, 0x9, 0x0, 0x100, 0x3f, 0xf2, 0xbf, 0x7, 0x9, 0x1, 0x2, 0xff, 0x8001, 0x5, 0x5, 0x0, 0x10000, 0xfffffffffffffffb, 0x43e, 0x0, 0x20], 0x1}}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x13}) 00:52:48 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x202000, 0x0, 0x0, 0x0) 00:52:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x38401, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000005a00)='/proc/capi/capi20\x00', 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1e, &(0x7f0000005a40)=""/14, &(0x7f0000005a80)=0xe) 00:52:49 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) sched_setaffinity(0x0, 0xfffffff5, &(0x7f0000000540)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x0, 0x0, 0x0) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0xa0000, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000140)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f00000001c0)={0x5}) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x23a}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) r5 = syz_open_dev$usbmon(0x0, 0x10000, 0x100) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000400)={0x0, 0x3, 0x7, 0x7f, 0x7, 0x7, 0xfff}) ioctl$int_in(0xffffffffffffffff, 0x8000000002a701, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, 0x0) eventfd(0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000004c0)={0x0, 0xfffffffffffffffd, 0x53, 0x9, @buffer={0x0, 0x24, &(0x7f0000000280)=""/36}, &(0x7f0000000300)="f337487a8507504dfd217deb6dff3e9b3a2c3184c1ceb646f96c324f1286c329f0fba7f91d837bcd578077722e6ba9cdd5cabff89349f826e77a733c51dc5a0f0314f747ca00211151b4e5a1f6276f92a51e56", 0x0, 0xb1d, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) rseq(0x0, 0x0, 0x1, 0x0) 00:52:49 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x8c', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:49 executing program 4: syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000009a11aaaaaa2086dd60b4090000303a0080000000000000000000ffffe0000002ff020000000000000000000000000001030090780009040060b680fa0000580000000000000000000000ffffffffffff0000000000000000000094ddbbc375b877d6b69338a1a352df0c8bd120e08b2f6db516c2beedb7dd078999014d9dcafa00943a8f9782ca16814d0c579df1a7cd033af98aa1e39ca20ee74790f3b02247c9d2508c4bb282e123e9131149cf58"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer2\x00', 0x40100, 0x0) recvfrom$x25(r0, &(0x7f0000000640)=""/4096, 0x1000, 0x40010040, &(0x7f0000001640)={0x9, @remote={[], 0x3}}, 0x12) r1 = open(&(0x7f0000000000)='./file0\x00', 0x246800, 0x176) write$smack_current(r1, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10) [ 697.998851][T10963] XFS (loop5): Invalid superblock magic number 00:52:49 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x202100, 0x0, 0x0, 0x0) 00:52:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0xfffa, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0) syz_emit_ethernet(0x140, &(0x7f0000000640)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000000c0)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:49 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\xf6', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x521880, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000001c0)=""/150) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r3, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000100)='./file0\x00', r1}, 0x10) 00:52:49 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x9, 0x2000) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0xfffffffffffffff7, 0x8, 0x8000, 0x10001, 0xf, 0x3, 0x1, 0x43, 0x1000, 0x6, 0x1, 0x6}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)) r2 = syz_open_pts(r1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x400, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xbe, 0x4000000}) 00:52:49 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x202200, 0x0, 0x0, 0x0) 00:52:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:50 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\xfe', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:50 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000001c0)=0x80) dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_ts_info}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x2e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {0x10}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 00:52:50 executing program 4: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) symlink(&(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='./file1/file0\x00') mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x6, 0x7, [0x8, 0xc959, 0x6, 0x0, 0xf0e, 0x6b5be3f2, 0x4]}, &(0x7f0000000180)=0x16) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000340)={r2, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x9, 0x4}, 0x90) lchown(&(0x7f0000000040)='./file0/file1/file0\x00', 0x0, 0x0) [ 699.025534][T11297] XFS (loop5): Invalid superblock magic number 00:52:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xacec9f3d7a480c7a, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000080)={'ip_vti0\x00'}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x13}) 00:52:50 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x202300, 0x0, 0x0, 0x0) 00:52:50 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x1000000000}) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000000)="68df70c0cea45913e8b42b68f7c1fd58c28fbe57aef410a0e225d362fb6bc934304547f800d74fb1a4c9f4d41a") ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) 00:52:50 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:50 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x202400, 0x0, 0x0, 0x0) 00:52:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x113, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x26b) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x8e, 0x4000) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x12, 0xc, 0x11, "f39c6705dbfc782448227d702ace81015fc038541827813afecfe77e64b1eb49f3896236c008f91e998a83b1b5c425084aabc8889e5b859c3405f868b24dec2a", "aee3996fa791911d71803fcf73f787194ad6beb335fb7c4323d5561493bbe972", [0x7, 0x100000000]}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x3, 0xfa00, {r1}}, 0xfffffe5f) 00:52:50 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000001c0)=0x80) dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_ts_info}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x2e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {0x10}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 00:52:51 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\xff', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) fchdir(r0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) 00:52:51 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0xffffffffff600000}, 0x7fffdfa1c000}) [ 699.984948][T11544] XFS (loop5): Invalid superblock magic number 00:52:51 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:51 executing program 3: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v1={0x1000000, [{0x6, 0x7}]}, 0xfffffffffffffe09, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)) r2 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x400000e4, 0x40000000103380) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x1, 0x3}, 0x1}}, 0x10, &(0x7f0000000380), 0x0, &(0x7f00000003c0)="c40ffca6f401", 0x6, 0x4008800}, 0x8000) r3 = syz_open_pts(r1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, r5) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x13}) 00:52:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000200)={'ah\x00'}, &(0x7f0000000240)=0x1e) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r2, &(0x7f0000003880)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000002c0)="92ea75e09fff899be0a27ebda4117383df14f614462c5424eb93feb14f18f5a89637f62e66deadb4f32d3d7c6a774a30d63c", 0x32}], 0x1}, {0x0, 0x0, 0x0}], 0x2, 0x40000) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}, 0x0) 00:52:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:51 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:51 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x202500, 0x0, 0x0, 0x0) 00:52:51 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) syz_open_pts(0xffffffffffffffff, 0x0) 00:52:51 executing program 2: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x5c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x48, 0x11, [@generic="e2abb4ec7645192056d52f76aacc17fd28d66a75a08d136f699d897bdabf4fd3c08e579e5253c2081c92cacb9693e7bb692f4ba15133ce6266b2a62bbacd9d21aa"]}]}, 0x5c}}, 0x0) 00:52:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000200)={'ah\x00'}, &(0x7f0000000240)=0x1e) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r2, &(0x7f0000003880)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000002c0)="92ea75e09fff899be0a27ebda4117383df14f614462c5424eb93feb14f18f5a89637f62e66deadb4f32d3d7c6a774a30d63c", 0x32}], 0x1}, {0x0, 0x0, 0x0}], 0x2, 0x40000) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}, 0x0) 00:52:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:52 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 700.984567][T11859] XFS (loop5): Invalid superblock magic number 00:52:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) r2 = openat(0xffffffffffffff9c, &(0x7f00000019c0)='./file0\x00', 0x101000, 0x2) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000001a00)="ca3630897eb17112e3", 0x9) 00:52:52 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x202600, 0x0, 0x0, 0x0) 00:52:52 executing program 4: pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000072ff8)={0x7fffffff}, &(0x7f00000000c0), 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=ANY=[]) fcntl$setstatus(r0, 0x4, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = open(&(0x7f00000004c0)='./file0/file0\x00', 0xa800, 0xe6) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) write$cgroup_subtree(r0, &(0x7f00000002c0)={[{0x2d, 'pids'}, {0x2d, 'io'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x14) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000180)={0x0, @aes256, 0x1, "a19babd1a8a19148"}) writev(r3, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r3, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000540)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000580)=0x18) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='htcp\x00', 0x5) sendto$inet(r3, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0xe000000}, 0x6) dup2(r1, 0xffffffffffffffff) io_setup(0x2, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000480), 0x4) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x35e}]}, 0x24}, 0x1, 0x0, 0x0, 0x3bc6d0a49ed2cd65}, 0x0) 00:52:52 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) r2 = fcntl$getown(r0, 0x9) ptrace$pokeuser(0x6, r2, 0x10001, 0x6) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x30002, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x8b9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000100)={0xfffffffffffff2ce, 0x2, 0x8000, 0x0, 0x2058, 0xfffffffffffffc00, 0x1000, 0x0, r4}, &(0x7f0000000140)=0x20) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:52 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:52 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x202700, 0x0, 0x0, 0x0) 00:52:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000b8fa8)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000400)=0x0) r3 = dup2(r1, r1) openat(r3, &(0x7f0000000080)='./file0\x00', 0x400000, 0x100) r4 = fcntl$getown(r1, 0x9) sendmsg$nl_netfilter(r3, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8400}, 0xc, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB='\x00\x00'], 0x240}}, 0x4040000) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x34000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r5, 0x5, 0x1}, 0x14) 00:52:53 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000040)={0x13}) 00:52:53 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 702.099237][T12018] XFS (loop5): Invalid superblock magic number 00:52:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x5) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xde5, 0xc0000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x400, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x7fffffff}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x20040010) 00:52:53 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x202800, 0x0, 0x0, 0x0) 00:52:53 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:53 executing program 4: pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000072ff8)={0x7fffffff}, &(0x7f00000000c0), 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=ANY=[]) fcntl$setstatus(r0, 0x4, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = open(&(0x7f00000004c0)='./file0/file0\x00', 0xa800, 0xe6) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) write$cgroup_subtree(r0, &(0x7f00000002c0)={[{0x2d, 'pids'}, {0x2d, 'io'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x14) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000180)={0x0, @aes256, 0x1, "a19babd1a8a19148"}) writev(r3, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r3, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000540)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000580)=0x18) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='htcp\x00', 0x5) sendto$inet(r3, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0xe000000}, 0x6) dup2(r1, 0xffffffffffffffff) io_setup(0x2, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000480), 0x4) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x35e}]}, 0x24}, 0x1, 0x0, 0x0, 0x3bc6d0a49ed2cd65}, 0x0) 00:52:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xb0100, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f000002eff0)={0x0, 0x0}, 0x10) 00:52:53 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x80, 0x1, 0x7450, 0x1ff}, 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x13}) 00:52:53 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x202900, 0x0, 0x0, 0x0) 00:52:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:54 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x2500000000000000, &(0x7f0000000140)={&(0x7f0000000080)=@mpls_getroute={0x24, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, [@RTA_TTL_PROPAGATE={0x8, 0x4, 0x2}]}, 0x24}}, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) 00:52:54 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0xfffffffffffffffc, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f00000001c0)=""/14) sendto$llc(r2, &(0x7f0000000080)="081db074639120067a3e342f3222dc39fa1e495c43777ebcf3a806f844ba332ecb9b21248f47bac01cb9eeb9bd09acb44022bd08a9b98d24bd7442e6b26695829d481128778ca29ad14098278f716b0777a36e8d138325738fb3123245948967ac0d388ae4d2c597e4abe9b7c6083dfde4124e262505429964889c1a86ee2f0fa22ec3d84a7b530c634c05b5ebf0d2a56542b1ec04e96c7b9b4e88bccac86cd32a373e8b4cfeed7d0964feb57a8cd9b2f3b0628356ad335c7c300b4d8e20f3a41a72ba", 0xc3, 0x20000040, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 702.999678][T12073] XFS (loop5): Invalid superblock magic number 00:52:54 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="229399095393e36a222a4418867b2873df8019f72ebe58375ed69b231bebc81ef45904a36e51db245f5bfd32b4f3331d52f9028d446e7a77c4b1ad8e97825d27b8b4c4d02eee51c07ebd1af7e3369f10346964a969fca1cff0a7fb0d79d34f6ebdaa2941259305a455d53c00df58ebbf5a633b02d65bf6402988a303ae26682ee75756d6b0f88c8f6eb08480bd475f7546038d6624f8cdd288a3d0a5175f38a275bd87518f4c68004bca6929428c9a3fd3bc0305e3c1b545718f654b", @ANYRES16=r1, @ANYBLOB="010000000000000000001500000014000100040001007564703a73797a3200000000"], 0x28}}, 0x0) 00:52:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f000000bdc0)='/dev/vsock\x00', 0x12141, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000038c0)=[{{&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f0000000540)=""/215, 0xd7}, {&(0x7f0000000640)=""/20, 0x14}, {&(0x7f0000000680)=""/37, 0x25}, {&(0x7f00000006c0)=""/13, 0xd}, {0x0}], 0x8, 0x0, 0x0, 0x3}, 0x9}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000940)=""/198, 0xc6}, {&(0x7f0000000a40)=""/103, 0x67}, {0x0}], 0x3, 0x0, 0x0, 0xffffffffffffff7f}, 0x435}, {{&(0x7f00000023c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002440)=""/186, 0xba}, {&(0x7f0000002500)=""/21, 0x15}, {&(0x7f0000002540)=""/88, 0x58}], 0x3, &(0x7f0000002600)=""/4096, 0x1000, 0x400}}, {{&(0x7f0000003600)=@l2, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)}], 0x1, &(0x7f00000037c0)=""/220, 0xdc, 0x100}, 0xb}], 0x4, 0x102, &(0x7f0000003b00)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x167, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x3ed, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000080)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r4 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x5, 0x0, 0x7fff, 0x100, 0x7, 0x6, 0x5f7, 0x100000001, 0x3ff, 0x6}) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x13}) 00:52:55 executing program 4: pipe(0x0) connect(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xfdbb) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) tkill(r0, 0x1000000000016) 00:52:55 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:55 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x202a00, 0x0, 0x0, 0x0) 00:52:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x33c00) 00:52:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) r2 = accept(0xffffffffffffff9c, &(0x7f0000000100)=@nfc_llcp, &(0x7f00000001c0)=0x80) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000200)=0xa4, 0x4) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:55 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) 00:52:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x2, 0xfffffffffffffffd, 0x80, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x2}) [ 704.332347][T12225] XFS (loop5): Invalid superblock magic number 00:52:55 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:55 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x393, 0x0}) 00:52:55 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) 00:52:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0xaae7, 0x9}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x0, 0x7f}) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 00:52:55 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x202b00, 0x0, 0x0, 0x0) 00:52:55 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg(r0, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000004c0)="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", 0xdfd}], 0x1}}], 0x1, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 00:52:55 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:55 executing program 4: ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80044326, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f0000000800)=[{}], 0x1, 0x0) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f00000008c0)="8da4363ac0ed0000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e071383fa5a669a53f2fe9eb4eb7918628af41b035fd98372e7c2a6970f5504", 0x75, 0x10000}], 0x0, 0x0) 00:52:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:56 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x1, 0x0, 0x45f}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:56 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}}], 0x4ab, 0x0, 0x0) 00:52:56 executing program 4: syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x3}]}}, @icmp=@timestamp_reply}}}}, 0x0) 00:52:56 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x202c00, 0x0, 0x0, 0x0) 00:52:56 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) io_setup(0x5, 0x0) close(0xffffffffffffffff) syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x4000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 00:52:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x8102, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000080)=0xc) sched_getscheduler(r2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) r3 = syz_open_pts(r0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'veth1_to_bond\x00', 0x200}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000280)={'team0\x00', r5}) ioprio_get$pid(0x3, r2) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x13}) 00:52:56 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 705.266066][T12502] XFS (loop5): Invalid superblock magic number 00:52:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:56 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x9, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:56 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x202d00, 0x0, 0x0, 0x0) 00:52:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x8000, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r1 = dup3(r0, r0, 0x10000000080000) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0xa, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) write$smack_current(r1, &(0x7f0000000000)='/dev/ptmx\x00', 0xa) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x13}) 00:52:57 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x0, 0x0}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x181400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, 0x0) r1 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00\x00\x00\x00\x00\x00`\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) ioctl(r0, 0x1000008912, &(0x7f0000000040)='\n') 00:52:57 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x10, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:57 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x202e00, 0x0, 0x0, 0x0) 00:52:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) [ 706.039167][T12654] device team0 left promiscuous mode 00:52:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) poll(0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}, 0x0) getresuid(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) getpeername$unix(r2, 0x0, &(0x7f0000000100)) 00:52:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) syz_open_pts(r0, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000040)={0x13}) 00:52:57 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x900, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 706.198217][T12675] XFS (loop5): Invalid superblock magic number 00:52:57 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x1020, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000000)='/dev/ptmx\x00'}, 0x30) poll(&(0x7f00000000c0)=[{r0, 0x40}, {r0, 0x1}, {r0, 0xc}, {r1, 0x4}, {r0, 0x8180}, {r0, 0x4000}], 0x6, 0xfffffffffffffff8) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x13}) 00:52:57 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:58 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2010, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:58 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) gettid() fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x5450, 0x0) tkill(0x0, 0x0) 00:52:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4102, 0x0, {0xc, 0x13, @l2={'eth', 0x3a, 'nr0\x00'}}}}, 0x28}}, 0x0) 00:52:58 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x202f00, 0x0, 0x0, 0x0) 00:52:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) r1 = syz_open_pts(r0, 0x10004) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:58 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x3f00, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x200) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) write$capi20_data(r2, &(0x7f0000000080)={{0x10, 0x4, 0x83, 0x83, 0x7, 0x2}, 0x1b, "a2277a14c535c8d0f6141584ea0500a194c82d9e11ed4ec7e6a329"}, 0x2d) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x13}) 00:52:58 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xedc0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:58 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="59cc9ee6e8e1", @random="164f1c10fcad", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty={[0x0, 0x1f4, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) 00:52:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r0) getresuid(&(0x7f0000000100), &(0x7f00000002c0), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getpid() ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) fstat(r1, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000bc0)=[0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0]) sendmsg$netlink(r2, 0x0, 0x40000) poll(0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}, 0x0) getresuid(0x0, 0x0, 0x0) r5 = dup3(r1, r4, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) getpeername$inet(r5, 0x0, &(0x7f00000000c0)) setsockopt$inet_group_source_req(r4, 0x0, 0x0, 0x0, 0x0) [ 707.692262][T12926] XFS (loop5): Invalid superblock magic number 00:52:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x802, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) r1 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) ftruncate(r1, 0x8007ffc) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x353, 0x0, 0x0, 0x38, 0x0, 0x60000000000}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}], "717da8b20b3d0afdcda53a7a83b7961f41f7a4d44e2dde105858df21cd80298f5749d1066ca8cf5788dd98ddafad73511410ee7343ef1a902971ca4d4de9a08e7a6c67f201a764fa4f5820011a5f80e51df6f11390592c1ea0c2", [[], [], [], [], []]}, 0x5d2) sendfile(r0, r1, 0x0, 0x400008bca) 00:52:58 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x8000a0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x802, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) r1 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) ftruncate(r1, 0x8007ffc) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "717da8", [[], [], [], [], []]}, 0x57b) sendfile(r0, r1, 0x0, 0x400008bca) [ 708.125046][T13171] XFS (loop5): Invalid superblock magic number 00:52:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:52:59 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x203000, 0x0, 0x0, 0x0) 00:52:59 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xfeffff, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:52:59 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x400000000000001, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x12, r2, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) 00:52:59 executing program 3: clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2502001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00\x00\xf6\x8c\x00\x00\x00\x00\x9bU\x00\x00\xc5\xcb\x00', 0x43732e5398416f1a}) ioctl$KDGKBTYPE(r0, 0x4b33, 0x0) 00:52:59 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007840)={&(0x7f0000006500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000007800)={&(0x7f0000006540)=@getspdinfo={0x130, 0x25, 0x0, 0x0, 0x0, 0x0, [@algo_crypt={0x11c, 0x2, {{'ctr(twofish)\x00'}, 0x698, "0af6d9160034c3a1fb7604904fb6c1ee4ee4a539e39207c384426e1b0fc318af1131e9868656c31c8c6930a2540c62086639af895992ea96d0d49587a8df7f51a04bbb065cacfdc0ba451933171142dd7ae1575537d90e9432a17e8f46090cee635a75910fbd91c343fa66e9acd9f66107f3bdd075556a958327d3fd2896b5cfe1d036a19bceb6f0320d7d74693731d0c3dc32e622ac6e9a52d22fc413ece91846f941fc4445550f19f48a91e343c46dab13eb3a72531fb0c2d7fbaae31e18839ddf147339b9cf989c341b51c3c8b83615e1e3"}}]}, 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 00:52:59 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:52:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:52:59 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x1000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 708.654821][T13187] cgroup: fork rejected by pids controller in /syz3 [ 708.678229][ T26] audit: type=1804 audit(1552697579.801:2470): pid=13186 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir330181167/syzkaller.YN4YuR/823/file0/bus" dev="ramfs" ino=92824 res=1 [ 708.855543][T13201] XFS (loop5): Invalid superblock magic number 00:53:00 executing program 4: getpid() sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) 00:53:00 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:00 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x203100, 0x0, 0x0, 0x0) [ 708.994713][T13320] kvm: pic: single mode not supported [ 709.001820][T13320] kvm: pic: level sensitive irq not supported [ 709.009658][T13320] kvm: pic: level sensitive irq not supported [ 709.027430][T13320] kvm: pic: single mode not supported [ 709.304163][T13436] XFS (loop5): Invalid superblock magic number 00:53:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\xff', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:00 executing program 2: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) close(r0) 00:53:00 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x9000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:00 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000540)=0x0) syz_open_procfs(r0, &(0x7f0000000500)='stat\x00') syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000000280)={0x0, 0x26, 0x6, @thr={&(0x7f0000000340)="eb9e9ffe62af25e1c897fc64f88f8a87b58bca69524273f7239b55ce59a11df48c97ebda28a79d0055ceea8919934926afa6fc220351de8a954f9d4a781526711e549af568c7871fee7ea7607300f7640dab639a4e764146e4ea5f46f810315cf532d51a75e77ba433e0c3842ae50af6835a4a1e8900563987f9be6f8f97406904", 0x0}}, &(0x7f00000002c0)=0x0) timer_delete(r1) signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000100)=0x4, 0x4) write(r3, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7906}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000180)={0x9, 0x3f, 0x0, 0x7, 0x1a, 0xe7be, 0x0, 0x7ff, 0x9, 0x6, 0xff, 0xf7}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac9b}], 0x1, 0x0) 00:53:00 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x203200, 0x0, 0x0, 0x0) 00:53:00 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='\x7fystem.posix_acl_access\x00', 0x0, 0x0, 0x0) 00:53:00 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x4000) 00:53:00 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x10000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:01 executing program 2: r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='~', 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0x0, 0x0) 00:53:01 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f00000000c0)='./file0\x00') clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)={0x29, 0x4, 0x0, {0x0, 0x3f, 0x1, 0x0, [0x0]}}, 0x29) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000080)=[0x8, 0xfffffffffffffff7], 0x2, 0x5, 0x3, 0x0, 0x7, 0x1000, {0x0, 0x2, 0x1, 0x0, 0x3, 0x8001, 0x1ff, 0xb2ef, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, "6239e628188503526b3093e4ee9aefcfbf5125868fcae5ee0aa77bf31715a347"}}) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) close(0xffffffffffffffff) unlink(0x0) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 00:53:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:01 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x20000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x6000001000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0x30d}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x17, &(0x7f00000000c0)={@loopback}, 0x57a3db9c2f9da54d) 00:53:01 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x203300, 0x0, 0x0, 0x0) 00:53:01 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x20100000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:01 executing program 4: 00:53:01 executing program 2: [ 710.294401][T13755] XFS (loop5): Invalid superblock magic number 00:53:01 executing program 3: 00:53:01 executing program 4: 00:53:01 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x3f000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:01 executing program 2: 00:53:01 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x203400, 0x0, 0x0, 0x0) 00:53:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:02 executing program 4: 00:53:02 executing program 2: 00:53:02 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x8cffffff, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:02 executing program 3: 00:53:02 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x203500, 0x0, 0x0, 0x0) 00:53:02 executing program 2: 00:53:02 executing program 4: 00:53:02 executing program 3: 00:53:02 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xa0008000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:02 executing program 2: 00:53:02 executing program 4: [ 711.233898][T13944] XFS (loop5): Invalid superblock magic number [ 711.726782][T13969] XFS (loop5): Invalid superblock magic number 00:53:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\xff', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:03 executing program 3: 00:53:03 executing program 2: 00:53:03 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xc0ed0000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:03 executing program 4: 00:53:03 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x203600, 0x0, 0x0, 0x0) 00:53:03 executing program 3: 00:53:03 executing program 4: 00:53:03 executing program 2: 00:53:03 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xf6ffffff, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:03 executing program 4: 00:53:03 executing program 3: 00:53:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:03 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xfeffffff, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:03 executing program 2: 00:53:03 executing program 4: 00:53:03 executing program 3: 00:53:03 executing program 4: 00:53:03 executing program 2: 00:53:03 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x203700, 0x0, 0x0, 0x0) 00:53:03 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xffff0000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:03 executing program 4: 00:53:03 executing program 3: 00:53:03 executing program 2: [ 712.790643][T14024] XFS (loop5): Invalid superblock magic number 00:53:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:04 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xfffffe00, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:04 executing program 4: 00:53:04 executing program 2: 00:53:04 executing program 3: 00:53:04 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x203800, 0x0, 0x0, 0x0) 00:53:04 executing program 3: 00:53:04 executing program 4: 00:53:04 executing program 2: 00:53:04 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xffffff7f, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:04 executing program 3: 00:53:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x400023) r2 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) [ 713.799879][T14068] XFS (loop5): Invalid superblock magic number 00:53:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:05 executing program 2: 00:53:05 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xffffff8c, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:05 executing program 3: 00:53:05 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x203900, 0x0, 0x0, 0x0) 00:53:05 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x28) r0 = socket$kcm(0xa, 0x6, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x406, 0x2}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 00:53:05 executing program 3: r0 = accept(0xffffffffffffff9c, &(0x7f0000000580)=@sco, &(0x7f0000000840)=0x3b) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x7fff}, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@ipv4={[], [], @empty}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000500)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'rose0\x00', r1}) setsockopt$ax25_int(r0, 0x101, 0xf, &(0x7f0000000640)=0x80, 0x4) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000880)={@null=' \x00', 0xa, 'irlan0\x00'}) socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$inet6(r0, &(0x7f0000000280), &(0x7f0000000340)=0x1c, 0x80000) ioctl(r2, 0x9, &(0x7f0000000780)="010001000000000088b070") getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000440)={r3, @in={{0x2, 0x4e23, @loopback}}, 0x5, 0xfffffffffffffc01}, &(0x7f00000001c0)=0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x28) r5 = socket$kcm(0xa, 0x6, 0x0) socketpair(0x1b, 0x1, 0x200, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x6}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000380)={r4, 0x19e000000000}, &(0x7f00000003c0)=0x8) setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) connect$rxrpc(r6, &(0x7f0000000400)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000200)=ANY=[@ANYBLOB="5b000000457f1d164cf8376cd924c92e8d7204713f9d1935a9b512648584d0f75af2ca012160330300dd15192d09e5423015e94846c53fdc5f6859a054f27e29e71524b2e0b7b7e21cbaf19c643002b5793573d9feaab30200000000"], 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x406, 0x2}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)={r2}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000980)={0x5, &(0x7f0000000600)=[{0x20, 0x8000, 0x3, 0x40}, {0x3, 0x3, 0x1f, 0x8}, {0x80, 0x7, 0x1, 0x401}, {0x9, 0x2, 0x0, 0x7ff}, {0x20, 0x9, 0x590f, 0x1}]}, 0x10) 00:53:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:05 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xfffffff6, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 714.748265][T14216] XFS (loop5): Invalid superblock magic number 00:53:05 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff85, 0xa, 0xffc2}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x3ffff, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x480140, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x4) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000040)=0x1000) 00:53:06 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x203a00, 0x0, 0x0, 0x0) 00:53:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="35bd99f56a2caa987329ad11b7dfd028679b677606cca27533a998db4f8616032511e6c6a23abbf0b4d298af9f4b19e0dcdb36425325df769c8a5e0f522f36a14184d4183bb605df0e85c4c0386d0fd3afa3916a44761c6ce23e6c40d406194937075e20009c63a6c889738f31b457827e1673be9f3f90efc5f63bee7f97cd86e74e86bf86220e4e23dc314e9337ea7f0cfb3ade836fe9b5cd8861d84cdf51e20bf49ebe131e22c94fb324deb052f2485e1b7281128b26d69407a696739b24f0173031fb618a8caac35fe7b5a1ea44ccf1472c7ac1e81e91b9707024c33be1b4194bfd49d5c16d80342a880a75fd8d669f742b86cf", 0xf5, 0xfffffffffffffff8) request_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='/dev/uinput\x00', r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c05, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x4000000000202, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x8) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = accept(0xffffffffffffff9c, &(0x7f0000000880)=@x25, &(0x7f00000003c0)=0x80) accept$alg(r3, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1000, 0x41) 00:53:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:06 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xfffffffe, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:06 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getdents64(r0, &(0x7f0000000140)=""/46, 0xfffffffffffffcbd) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) r2 = socket$inet(0x2, 0x2, 0x3441) fsync(r2) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000180)=""/122) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x1, 0x0) fchmodat(r3, &(0x7f00000000c0)='./file0\x00', 0x40) 00:53:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000001c0)) ioperm(0x4854fab2, 0x6, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:53:06 executing program 2: timer_create(0x7, &(0x7f0000000000)={0x0, 0x3c, 0x5, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {r1, r2+10000000}}, 0x0) r3 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x1, 0x4000) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f00000001c0)={0xfffffffffffffffd, 0x34e}) r5 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r3, 0xb) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:53:06 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x203b00, 0x0, 0x0, 0x0) 00:53:06 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000780)='/dev/dsp\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x12, r0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1000}}, 0x20) open$dir(&(0x7f00000000c0)='./file0\x00', 0x480, 0x30) 00:53:06 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xedc000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40100, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) syz_open_dev$loop(0x0, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='+pkds '], 0x6) lsetxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'L-', 0x368b}, 0x28, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x8) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, 0x0) [ 715.574787][T14585] XFS (loop5): Invalid superblock magic number 00:53:06 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup2(r0, r0) write$P9_RREADDIR(r1, &(0x7f0000000080)={0xdd, 0x29, 0x1, {0x3, [{{0x70, 0x9, 0x5}, 0x2, 0x7, 0x7, './file0'}, {{0xc0, 0x3, 0x3}, 0x8, 0x4d8c, 0x7, './file0'}, {{0x20, 0x3, 0x3}, 0xc9a, 0x8, 0x7, './file0'}, {{0x20, 0x3, 0x1}, 0x0, 0x0, 0x7, './file0'}, {{0x8, 0x0, 0x8}, 0x2, 0xff2, 0x7, './file0'}, {{0x10, 0x0, 0x4}, 0x15b4, 0x8000, 0x7, './file0'}, {{0xd0, 0x0, 0x7}, 0x400, 0x200}]}}, 0xdd) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x0, 0x0, 0x7}) 00:53:06 executing program 4: unshare(0x2000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xb, 0x40000000003e, 0xa7, 0x59, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000009c000002800000850000000000000095"], 0x0}, 0x48) ioctl$void(r0, 0xc0045878) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x3d}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) 00:53:06 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x1000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:07 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000), 0x4) bind(r0, &(0x7f00000000c0)=@nfc={0x27, 0x1, 0x2, 0x2}, 0x80) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x51) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x7ff) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000240)=0x8, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000080)=0x8001, 0x4) 00:53:07 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x203f00, 0x0, 0x0, 0x0) 00:53:07 executing program 3: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000500)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) syz_mount_image$f2fs(0x0, &(0x7f00000000c0)='./file0/file1/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x1) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000140)={0x5001, 0x10000, 0xc4, 0x4, 0x7}) rename(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000280)='./file0/file1/file0\x00') 00:53:07 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x8000a0ffffffff, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:07 executing program 4: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001c80)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x20000230, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 00:53:07 executing program 4: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) write(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000785000)=0x2, 0x4) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) 00:53:07 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xfeffff00000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620c, &(0x7f0000000100)) r1 = fcntl$getown(r0, 0x9) socket$pppoe(0x18, 0x1, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x80000001}) openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x4a000) [ 716.592235][T14852] overlayfs: filesystem on './file0' not supported as upperdir 00:53:07 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x100000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:07 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101900, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x81, 0x0, &(0x7f0000000100), 0x40, &(0x7f0000000140)={[{@sysvgroups='sysvgroups'}, {@data_writeback='data=writeback'}, {@noauto_da_alloc='noauto_da_alloc'}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@nomblk_io_submit='nomblk_io_submit'}, {@nolazytime='nolazytime'}, {@noquota='noquota'}, {@noacl='noacl'}]}) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000040)={0x3, 0x3}) kexec_load(0x0, 0x0, &(0x7f0000000740), 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x840) [ 716.707005][T14841] XFS (loop5): Invalid superblock magic number 00:53:07 executing program 3: r0 = socket$inet(0x2, 0x840000000003, 0x2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000040)=0x1010800, 0xfffffffffffffe3b) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000bcf000), 0x4) [ 717.198742][T15179] XFS (loop5): Invalid superblock magic number 00:53:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newsa={0x13c, 0x10, 0x721, 0x0, 0x0, {{@in, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, {@in=@broadcast, 0x0, 0x833}, @in6=@empty={[0xa]}, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x3, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{0x0}], 0x1, 0x0, 0x0, 0x2}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}}, {{&(0x7f0000003980)=@ipx, 0x80, 0x0, 0x0, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006cc0)=""/230, 0xe6}, {&(0x7f0000006dc0)=""/66, 0x42}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}], 0x5, 0x0, 0x0) eventfd(0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000001c0)={0xa0002, 0x0, [0x0, 0x81, 0x0, 0x1ff, 0x8, 0x400, 0x2, 0x2]}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000002c0)=0x16, 0x4) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000240)=0x44) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'bond_slave_1\x00'}, 0x18) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000, &(0x7f00000009c0)=ANY=[@ANYBLOB=',smackfsroot=/dev/input/mice\x00,do=/dev/input/mice#,appraise,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000ff8000), 0x0) socket$alg(0x26, 0x5, 0x0) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x40000, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r6, 0xb00, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0xd0}, 0x10) 00:53:08 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x200000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:08 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x20be0f, 0x0, 0x0, 0x0) 00:53:08 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = accept4(r0, &(0x7f0000000600)=@vsock, &(0x7f0000000400)=0x80, 0x800) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000a00)=0x3ff, &(0x7f0000000a40)=0x4) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000680)={0x0, 0x2, 0x3, 0x272}, 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = accept$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000800)={0x89, @loopback, 0x4e22, 0x2, 'lblc\x00', 0x20, 0x6, 0x7a}, 0x2c) setsockopt$packet_buf(r3, 0x107, 0x16, &(0x7f00000002c0)="39cfadf367badb9e816e3e76ae323db964d8539d2afd6877d97e0386d29cb179d46bee2a0f12c43ce76909dc60d18273a7770da8f16a55378d8f27c7fd75eac0a7710f8fa1f3a1c74eeb207fc0f8630cae69faa07e1d5cf6e8479ed2ccdb402666d4f362cf5eba9de917dc6a3bac5cf3830e9b4bffa70ef0ad6b5b340060b4d403b177f53f7ef02a21766b9461228ed95ddbaf957db977489376b954d1e502db865b6cd947e18bcef08c63b9f6a6c9333d4ff0a1e9eed9618cae", 0xba) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000500)=ANY=[@ANYBLOB="6600000000000000000000000000000000000000000000970000006476bfd6b61d38b337e8823543eba7da512fe7b7d04efabfd1b55091bb0ea9837458c32991ae7d5a66f0014c11695e365730ada9012ffce5c044b50900000013738024cb613269f0aeec27ef617395a03c5d068c92f57e15e1073da921c8a8acc3e2a126422097791be2e35baee5cc1a0cb8e161ec6ca504fdaafdaca069817c76f8d893d1c06793120444248200732d3e99d3988d68d9"], 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x8, 0x5}, &(0x7f0000000900)=0xc) recvmsg$kcm(r1, &(0x7f0000001dc0)={&(0x7f0000000c00)=@sco, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/126, 0x7e}], 0x2, &(0x7f0000001d00)=""/152, 0x98}, 0x2000) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000940)={r7, 0x9}, &(0x7f0000000980)=0x8) pselect6(0x40, &(0x7f0000000200)={0x8, 0x1, 0x6, 0x2, 0x7, 0x10001, 0x0, 0x8000}, &(0x7f0000000380)={0xe2, 0x6, 0x5, 0x3ff, 0x2, 0xfffffffffffffffa, 0xfffffffffffffb93, 0x1000}, &(0x7f00000003c0)={0x7ff, 0x0, 0x57b9171d, 0x0, 0x0, 0x5, 0x4, 0x3}, &(0x7f0000000440)={r5, r6+30000000}, &(0x7f00000004c0)={&(0x7f0000000480)={0x3}, 0x8}) r8 = accept4(r2, 0x0, &(0x7f00000006c0), 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x1ff, 0x30}, &(0x7f0000000740)=0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000880)={0x8, &(0x7f0000000840)=[{0x3, 0x20, 0x44, 0x10000}, {0x9, 0x800000000000000, 0x9, 0x8001}, {0x7, 0x5, 0x10000, 0x9c7}, {0x40, 0x3f, 0x8, 0x9}, {0x7, 0xb4a, 0x5, 0x2}, {0x6068, 0x4, 0x5, 0x567}, {0x5a3, 0x89, 0x1, 0x4}, {0x2, 0x7ff, 0x400, 0x7e20}]}, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000780)={r9, 0x9}, 0x8) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000b40)={r2, 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000a80)=0xabd8, 0xfffffdd0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000007c0)={'veth0_to_team\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}}) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000009c0)={'team0\x00', r4}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000bc0)=ANY=[@ANYBLOB="ec2bf9d0eb70f882de567fa64b546f84b365dfd213c5cc00000000001a490e"], 0x0) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e23, 0xfffffffffffffc1b, @mcast2, 0x6}, {0xa, 0x4e21, 0xff, @mcast1, 0x1}, 0x0, [0x252a, 0x0, 0x5, 0x3, 0x2dc, 0x1, 0xffffffff, 0x5]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x6, @mcast2, 0x100000000}, {0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x6, [0x6, 0xb5, 0x3ff, 0x9, 0x1000, 0x1, 0x9, 0x7fff]}, 0x5c) close(r0) 00:53:08 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpgrp(0xffffffffffffffff) sched_getattr(r1, &(0x7f0000000140), 0x30, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000333f88)={0x2, 0xfffffffffffffffe, 0x0, 0x2000000000008, 0x8, 0x0, 0x0, 0x25dfdbfd, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0xc) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x9, 0x200000) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000080)) [ 717.647022][T15199] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20002 00:53:08 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x900000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 717.745412][T15312] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20002 00:53:08 executing program 4: r0 = memfd_create(&(0x7f0000000580)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="340000000000e3ffffff0000c7d0b3a0e6a90a1fc0e7ff1d06f01e1ada675c93055c3b49c20afaa29b99"], 0xe) accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x2000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 717.815225][T15255] XFS (loop5): Invalid superblock magic number 00:53:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000180)=0x3, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b) listen(r1, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0xd6, "4a0fe556aaea0c9f0b6b2975a61a7a32acae02d114422822505a112ff4891411a7e47d66f3c6d85e31f1972dd98d15d38eac21d332df52d2d3693e301656e8d5bb7fc843931d1cdc8feb00d58bb3d6c90190e298f1990323e7b454e1222266857f3fb87b44a1194f469cc8fc3cb2fe317df89c8992eae91dd0960841f1de4a7a0676a2e6d9d51125346f613608c849313e4bd0bf0ff17d6e476164e35f7b1193ef94d1116f1935d9a934975454c3e9f2fd26a68ac5b890006d9391cc771d44a6f73df385346e2154c95aad3659586a37baf87b045f61"}, &(0x7f0000000040)=0xde) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0xfff, 0x2, 0x0, 0x101, r2}, 0x10) 00:53:09 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x20ec02, 0x0, 0x0, 0x0) 00:53:09 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x1000000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:09 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x3, 0x1, [0x81]}, &(0x7f0000000100)=0xa) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r1, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x541b, 0xa05006) 00:53:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\xf9', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:09 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2000000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:09 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000180)=0xbf, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0xb00, 0x0) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000000c0)=""/122, &(0x7f0000000140)=0x7a) writev(r0, &(0x7f0000000440), 0x1000000000000000) 00:53:09 executing program 3: r0 = socket$inet6(0x10, 0x6, 0xfffffffffffffffd) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5500000018007f1412fe01b2a4a280930a06000000a84306910000000b000f0035020000060000001900154007000001d40000dc1338d54400009b84136ef75afb83de44110016000d00014002000000ec4faba7d4", 0x55}], 0x1}, 0x0) 00:53:09 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x20ec04, 0x0, 0x0, 0x0) 00:53:09 executing program 2: ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000280)=0x38000000) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) setsockopt$inet_dccp_int(r0, 0x21, 0x7, &(0x7f0000000080)=0x8000, 0x4) 00:53:09 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="857e2300070020000000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x2b7, &(0x7f000000cf3d)=""/195}, 0x48) 00:53:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x0, 0x3e7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001400)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000340)=0xe8) getgroups(0x8, &(0x7f0000000380)=[0xee01, 0x0, 0x0, 0x0, 0x0, 0xee01, 0x0, 0x0]) getgroups(0x9, &(0x7f00000003c0)=[0xee01, 0xee00, 0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) r3 = getegid() r4 = getegid() getgroups(0x1, &(0x7f0000001500)=[0xee01]) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001540)={0x0, 0x0, 0x0}, &(0x7f0000001580)=0xc) setxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f00000015c0)={{}, {0x1, 0x6}, [{0x2, 0x3, r0}], {0x4, 0x7}, [{0x8, 0x6, r1}, {0x8, 0x1, r2}, {0x8, 0x6, r3}, {0x8, 0x6, r4}, {0x8, 0x3, r5}, {0x8, 0x2, r6}], {0x10, 0x5}, {0x20, 0x1}}, 0x5c, 0x2) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL_GET(0x22) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x2000, 0x0) ioctl$KVM_SET_DEBUGREGS(r9, 0x4080aea2, &(0x7f0000000240)={[0x0, 0xf000, 0x0, 0x3000], 0x2, 0x11, 0x100000000}) r10 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r10, 0x40405514, &(0x7f00000001c0)={0x2, 0x5, 0x4, 0x6, 'syz1\x00'}) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000001700)={0x0, 0x5, 0x1}, 0x8) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 00:53:09 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2010000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:09 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3f, 0xc057a0b21ea8ad0d) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/130, 0x82}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000180)=""/74, 0x4a}, {&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000580)=""/220, 0xdc}], 0x5, 0x0) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000480)={0x9, 0x6, 0x4, 0x20000, {}, {0x7, 0x1, 0x4, 0x9, 0x4, 0x1, "6d9dfffb"}, 0x100000000, 0x1, @offset=0x6, 0x4}) 00:53:09 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x208, 0xa5) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x0, 0x4, @mcast1, 0x101}}, 0x0, 0x8, 0x0, "9fc72b543b28dd4728c3988b7adea76fa59f716c731782304d2a8b2baf8c1724fb01b86d7c1d88f3c7322926d8f0fcdb51b5df3ba8b696320eb85ae1bd8e6af048c54f27e0dad819d7cb50aaa2bc300f"}, 0xd8) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00000000c0)=0x7, 0x4) setns(r1, 0x8000000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="9dddcae325720564427d3529191e41ac926197828a83a1c7c1d6010e6734c6283786ae79f8c2399b9d358b11ae60b921ad6d264e6e555682583a78c6bbedcab5623665d14264cd997ae37b210fe0cd416e1423c2407a71e75db3750d44e1ab125f3f61e1dc8cfe918469ea680bbcb52e5ca49a63582779f806eb2bdb19b9c94e2d9509675a28b0c5518ac4d1a2b065c0133256f67089f73a42160f477d996fc6805fc54ccad35ded1918e897fafc62147d1255903e8bf5d01a6d4549"], 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) clock_nanosleep(0x3, 0xfefffffffffffffc, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x8000, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x40c5, @mcast2, 0x9}, 0x1c) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) sendto$inet6(r0, 0x0, 0xffffff91, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x6e) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000200)) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000ffffbffe) 00:53:10 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x3f00000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x7f', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:10 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0xe0fb00, 0x0, 0x0, 0x0) 00:53:10 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x8cffffff00000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:10 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x7fffdfd13000, 0x0, 0x0, 0x0) 00:53:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000002fc0)={&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x120, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000080)=""/6, 0x20000086}, {&(0x7f0000000240)=""/74, 0x4a}], 0x3, &(0x7f0000005180)}, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000ac0)={@rand_addr, @dev, 0x0}, &(0x7f0000000b00)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b80)=0x14) getsockname$packet(r1, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000f00)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001f80)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000002080)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000020c0)={'eql\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000002100)={0x0, @loopback, @dev}, &(0x7f0000002140)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000006c40)={'veth0_to_team\x00', 0x0}) accept4(r1, &(0x7f0000006c80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006d00)=0x80, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000006e40)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000006e80)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000006f80)=0xe8) getpeername$packet(r1, &(0x7f0000006fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000007000)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000008880)={'bond_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000088c0)={'veth0_to_bond\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000008900)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000008940)={@remote, @rand_addr, 0x0}, &(0x7f0000008980)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000089c0)={@rand_addr, @dev, 0x0}, &(0x7f0000008a00)=0xc) getsockname$packet(r1, &(0x7f0000008a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008a80)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000000b680)={'batadv0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f000000b740)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f000000b840)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f000000b880)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f000000b980)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000000b9c0)={0x0, @rand_addr, @local}, &(0x7f000000ba00)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f000000bb00)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f000000bc00)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f000000bd80)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f000000be80)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f000000bec0)={@multicast2, @multicast2, 0x0}, &(0x7f000000bf00)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000c840)={&(0x7f0000000000), 0xc, &(0x7f000000c800)={&(0x7f0000000f40)=ANY=[@ANYBLOB="b8080000", @ANYRES16=r2, @ANYBLOB="11032cbd7000fddbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="2c02020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040006000000080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004006f000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r4, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r5, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000008000300030000000800040001f8ffff38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400a600000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400ffff00004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r7, @ANYBLOB="8c02020044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000014000400000036040000000007000900c09a000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000200000008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000034000400090001000000000009000003400000000100ff09050000003c0a09080000000029000005550700009d810106ab37000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000600000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400090000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="400002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="c36268e2e5ceaeceb5e53d5538305e2a2cf528f56f493eefc3f79cdd59727466df0a12460821ccfdf3", @ANYRES32=r16, @ANYBLOB="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", @ANYRES32=r17, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r20, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400070000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r22, @ANYBLOB="c0000200400001002400010071756575655f696400000000000000000000000000000000000000000000000008000300030000000800040032d6855608000600", @ANYRES32=r23, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r24, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400fbffffff080007000000000008000100", @ANYRES32=r25, @ANYBLOB="44000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000400000008000600", @ANYRES32=r26], 0x8b8}, 0x1, 0x0, 0x0, 0x840}, 0x4004000) 00:53:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getroute={0x24, 0x1a, 0x401, 0x0, 0x0, {}, [@RTA_MARK={0x8, 0xa}]}, 0x24}}, 0x0) 00:53:10 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xf6ffffff00000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:10 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x7ffffffff000, 0x0, 0x0, 0x0) 00:53:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x8c', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:10 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2, 0x0, 0x0) 00:53:10 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20401) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) r1 = socket(0x2000000000000021, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r1}) setsockopt$inet6_dccp_buf(r1, 0x110, 0x2, 0x0, 0x4) 00:53:10 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfff, 0x8000) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000080)={0x0, {0x9}}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x68f7}, @val={0x3, 0x4, 0xb6, 0xf8c4, 0x4, 0x5c0}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @local, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty}}, 0x2a) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r1}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ftruncate(r2, 0x1e) pwrite64(r2, &(0x7f0000000380)="a8", 0x1, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, [0x825, 0xff, 0x5, 0xe47]}) ioctl$FS_IOC_FSSETXATTR(r2, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x0, 0x980000}) 00:53:10 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x3, 0x0, 0x0) 00:53:10 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xfeffffff00000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\xf6', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:10 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xffff000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:10 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x3c5, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@remote, @in6=@ipv4={[], [], @initdev}}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) io_setup(0x4, &(0x7f0000000140)=0x0) fcntl$setstatus(r1, 0x4, 0x4000) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="7ab1", 0x2}]) 00:53:10 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x4, 0x0, 0x0) 00:53:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x2800, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={0x0, @broadcast, @remote}, &(0x7f0000000380)=0xc) sendmsg$xdp(r1, &(0x7f0000000ac0)={&(0x7f00000003c0)={0x2c, 0x0, r2, 0x21}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000400)="da17602839ae9bb79fb899ec91849d1b799e9b96665f4030ad32ab2ba466d95d8e27cc31426865b8970e813a89208a167a28171c5a4dc3d7302cc8cc18b83e28f60fbf57b5c7303975b0286fcc31569eb9147bb5399990461b18d73519316361ea81d0cd0059bc9b5ddbc4646544479fa2e60792a5298c278eb497251e7eed7b2a6302944424b65706eaa3dfccaaeb24a4a3e0b0b2685ebaf2205014b6911dac8c18867b979a46577c77f06f023690aee54eeff61f64cb1e00209af1de7bc839ca3837ab00ad6db59738bd44f19dcdbd5e7ba249fc48715ce2dcd8ca24fe", 0xde}, {&(0x7f0000000500)="8918d6800aabae00fc66f7c5351b285cf818efbc6f5de0ea567134188e0d234c653754a686262d1c6c59f29842d5adce87b3a4f648886a09e951ccd7ec63dd5f0dc718d5033c0b14d3a5b18fe7e30f86a7450eddd4cafd3b219123014bf68c25e15ddd4591d3725129ee0268b5eec939a56f797963345788e4067ff1256ccf65750145aac7faa8a9517ea8777efefddccdfcf2dce126fd0a72ff87a5dfb52ffd565c15d687d49e87ce157901aa7d7f00934d6a9f01d9e4b3aa840638f323e32a90cf", 0xc2}, {&(0x7f0000000600)="31ace88829b76ede41e2fd16dd571e47ff076baecee6df8c2dcbf0fc5d3674b9d3929e60e6e7bcb1d9b553e220cfa6fd108233aa8e4d837c929ed8ccc1ec19a4240f2096af5675f867bfe7911224fa055b0d74d52d90c1a268c932aa0e5df9f3716075ec15d122eafdb155", 0x6b}, {&(0x7f0000000680)="ff5122bc50c62106f978d81d9f39b93100b12625ea6f739e6345a9d8098e4a1a5a75499a839594d3a64ac9114ef51937420cd82913c71524ad0d6acd9f761933e51d5e07fed8bf0432a794c8e09acda828151ad40f21d097048e41e56d000c68a5ebf7a7da547d230e51db8c24a8fe3e5a4299bd0b8bac88a82ff62f581472b6629a5e05cb509a2d323fd2748ebfeb0232d03b4e95dc1a51388f92", 0x9b}, {&(0x7f0000000740)="4608555ab24dc5bfbd43e8d2402b64cee3deb1dae35de22f13332b272cd0b2f88f036000e1624635850465aa2c0319557764f35c54166cd68a5af86ea13741b87c7354785f173070aa66e892a4f3d86e0ca9be405dd884644430c752514e1721a02ec1c41171810fdef34deb23c8e98d472c496c07baf50d0b12a3c73637994183b57a720d0901c239979d8f676c612165cb2506234a97ea8d5908c273260a67e4d6a6a0ec", 0xa5}, {&(0x7f0000000800)="fc2db3bb30b633d7cac0b90b4b7b7458cb574607556250943fc4f1b07f23bd61eea884686ba0f33418e16be2f60c7b80050d0bf26162346ab7dc132540d5df9dafaed39ebb1b11b5f1b747360cb02eb95203e320090c19fe3964656627c3339b5b0b76a55ef753faebf1d04f035b9f446835c2e7cf1cf960c0c0bfd7d7edcfe1b7b813e0", 0x84}, {&(0x7f00000008c0)="0e0e668a349f68305caf87aee3292c9766c01666cc4108c1f0ddc24e1b52ccc7107446df862547", 0x27}, {&(0x7f0000000900)="19442a75a20ab6c62af1be47c887524b24bcf51e424b755815e89457afd267f69aa426a177ab0a5c", 0x28}, {&(0x7f0000000940)="ee3b64835b8e8e36660e035a2d9c599e812d9fb119af8f054e4ffd73455fd18013981fc57a4efc718ca5d019c4dec9170061af95561e18b06c86525f73ca11dcc89b42955ec5d01e24f49c09c53f7517d5699231ff51ed2d40", 0x59}, {&(0x7f00000009c0)="4f7357b57c7aa10f53ac58d503af584da1f9e9eb4f539df5c15dbb3e6c5b912ae8d7d5a63d0b89edbd84aa77e9eaa6e7a661797f3b37e503336099b78bcc", 0x3e}], 0xa, 0x0, 0x0, 0x4}, 0x84) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000080)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr="b8a143d439afff9f4da92ed3b5c24924"}, 0x1c) 00:53:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0xd, &(0x7f0000000000), 0x20395dd4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/current\x00') setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000000c0)=0x101, 0x4) 00:53:11 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xffffff7f00000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:11 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x5, 0x0, 0x0) 00:53:11 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) ioctl$TIOCNXCL(r0, 0x540d) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000100)={0x1c, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @loopback}}}, 0x108) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={@remote, 0xd, r1}) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000080)=0x401) r2 = socket$inet6(0xa, 0x7ffff, 0x1000) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x14) 00:53:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs*', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:11 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x831, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000001c0), 0x1e0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x406000, 0x0) 00:53:11 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x6, 0x0, 0x0) 00:53:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x0, 0xc, 0x3, "f50d4d30eecf733a14b37408dbb2f88ca740ac34fa7c0d12574f41b4f33576c8", 0x3035775b}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 00:53:11 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x880) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x100, 0x1, 0x5, {0xf, @pix={0x3, 0x80, 0x0, 0x7, 0x8, 0x5, 0xf, 0x2, 0x1, 0x7, 0x1, 0x3}}}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400202, 0x0) bind$alg(r1, &(0x7f0000000440)={0x84, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) 00:53:11 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xffffffffa0008000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x5b9, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x21, &(0x7f0000000040)=ANY=[@ANYBLOB="00009686f4ca59d3a26b868fb5153c570000"], &(0x7f0000000080)=0x144) socket$l2tp(0x18, 0x1, 0x1) 00:53:11 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x7, 0x0, 0x0) 00:53:11 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'tran%=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\xd1', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:11 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000001c0)={0x4, [0x20, 0x4036, 0x1, 0x6]}, &(0x7f0000000200)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x8, &(0x7f0000000140)=0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r3, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000140), 0x5ee}]) io_setup(0x7, &(0x7f0000000040)) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f00000000c0)=0xbd) 00:53:11 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x8, 0x0, 0x0) 00:53:11 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'tranI=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:11 executing program 3: r0 = inotify_init1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04020000", @ANYRES16=r2, @ANYBLOB="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"], 0x204}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) waitid(0x1, r3, 0x0, 0x8000001000003, 0x0) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='bpf\x00', 0x80, &(0x7f0000000400)={[{@mode={'mode', 0x3d, 0x6}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x77f8}}, {@mode={'mode', 0x3d, 0x8000}}, {@mode={'mode', 0x3d, 0x7b3b}}, {@mode={'mode', 0x3d, 0x8001}}, {@mode={'mode', 0x3d, 0x5}}], [{@obj_user={'obj_user', 0x3d, 'TIPCv2\x00'}}, {@subj_role={'subj_role', 0x3d, 'TIPCv2\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'TIPCv2\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x7f}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/vga_arbiter\x00'}}]}) 00:53:11 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x9, 0x0, 0x0) 00:53:11 executing program 2: socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x3, 0xfff, 0x0, 0x8, 0x101}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xff, 0x100) write$P9_RLERROR(r2, &(0x7f0000000100)={0x14, 0x7, 0x2, {0xb, 'selinuxbdev'}}, 0x14) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0xfffffffffffffffe, 0x0) 00:53:12 executing program 4: r0 = socket$inet(0x2, 0x2, 0x1ff) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000000c0)={{0x0, @local, 0x4e24, 0x4, 'wrr\x00', 0x0, 0x8, 0x36}, {@rand_addr=0x9, 0x4e21, 0x0, 0x0, 0xcb0, 0x400}}, 0x44) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffefffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 00:53:12 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'tranQ=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\f', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:12 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xa, 0x0, 0x0) 00:53:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000006c0)={'batadv0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "00284d3b7f10f4e292c3a7b84fdd235710b8292562db827811901905eca306c8", "cc4644dde37f150d377abcf2ff14f5c3585e3ea82c4d214a50419058d1e33445", "c326c08ea1cbb40b7dd2ecba6debab665d00b8fd64cb0fb0deb53c87946062bb", "2decc83234a964013fb06a9c71cb604618bfe25614e2a97b99eb5744de4bbac3", "bbd9dcc48cc1fb5abcc7536560fcc3e3df480ef43397ab7b389c6ba95cb87850", "faa5e2c6771fc7b8628c3b94"}}) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x800, 0x21) write$P9_RFSYNC(r1, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) 00:53:12 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x2, 0x20003ffe) r1 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r2 = getegid() keyctl$chown(0x4, r1, 0x0, r2) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x40189206, 0x400010) getsockname$ax25(r0, &(0x7f0000000200)={{0x3, @null}, [@default, @rose, @netrom, @remote, @null, @null, @rose]}, &(0x7f0000000280)=0x48) 00:53:12 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'tranR=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:12 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xb, 0x0, 0x0) 00:53:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) flistxattr(r0, &(0x7f0000000000)=""/64, 0x6) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp-reno\x00', 0xb) 00:53:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:12 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'tranS=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:12 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xc, 0x0, 0x0) [ 721.622145][T16835] XFS (loop5): Invalid superblock magic number 00:53:12 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xfffffffffffffffc, 0x0, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x6}, 0xfffffffffffffd98) r0 = socket(0x11, 0x80002, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0x224) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="2b000000be00aaaaaaaaaabb0800450000580000000000339078ac1814aaac1414aa342085000000000000000800000086dd00004708000008b2a9d84ee1839149f172fc3ae300004773c0bd080022eb080000002000000002000000000000000000000008006558fdffffffbc50849983ef4d7581b16282486e9858f6dc75be9d8f96cc6a4186e67d6bfeb64d4d073bb2e517224e95464a52a6a08170467ccfada7"], 0x0) 00:53:12 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000080)) 00:53:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lookup_dcookie(0x1, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) prctl$PR_SET_FPEXC(0xc, 0x2) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x400140, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) r4 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x10004}) r5 = socket$inet(0x2b, 0x1, 0x0) bind$bt_sco(r4, &(0x7f0000000080)={0x1f, {0x93, 0x10001, 0x20, 0x6, 0x3, 0x9}}, 0x8) bind$inet(r5, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) r6 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000280)=""/85) write$RDMA_USER_CM_CMD_GET_EVENT(r3, 0x0, 0xfffffffffffffecf) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r5, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) sendto$inet(r5, &(0x7f0000000300)='\a', 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, &(0x7f0000000380)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="30b65bcbe7b08563d9b976f2f7dbdf26027804fe", @ANYRES32=r7, @ANYBLOB="08000200ac1414aa08000200e000000208000100ac1414bb"], 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) 00:53:12 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xd, 0x0, 0x0) 00:53:12 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'tranT=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:12 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xe, 0x0, 0x0) 00:53:12 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'tranV=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 721.797830][T16950] tls_set_device_offload_rx: netdev lo with no TLS offload 00:53:12 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="0a5cc8070031afa8b40a08d5bd805d55438ca8ca2fb3b088626fc887ca8cdaf34f4b3dfc7281f3a8267ad879e68792") openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) epoll_create(0x1) write$FUSE_POLL(r1, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x1ff}}, 0x18) getgid() bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) r3 = mq_open(&(0x7f0000000080)='bdev\x00', 0x41, 0xc4, &(0x7f00000000c0)={0x3f, 0x6, 0x94, 0xffffffff, 0x3, 0x10000, 0x1, 0x7}) mq_timedsend(r3, &(0x7f0000000000)="e1bd6cd0afde34321df09a6d21a196923c8789fbec2ea693ba8964b3fe243e2d42cdc1b9eef3721daa36ba559839d6", 0x2f, 0x6, &(0x7f0000000040)={0x1000000000, 0x989680}) mq_timedsend(r3, &(0x7f0000000100)="73b3cafec3dbd277099115feb843043bcd21914a3dd770451ca1844af1702112de1c7734850769393d14c839755a14d817df51fee3f9c0eb552a2c2ed1587ddc4541f459edf88ac4aeb604daa86338ecf4a9ac6ff010cf7c5811", 0x5a, 0x5, &(0x7f00000001c0)) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) connect$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0x5, {0x2, 0xfffffffffffffff9, 0x7, 0x7, 0x100000001, 0x4000000000000}, 0x100, 0x8}, 0xe) ioctl$int_in(r2, 0x5421, &(0x7f0000000900)=0x6) socket$vsock_dgram(0x28, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000a00), 0x73c5d3417c1b93e7, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB="8300000016d45041858856dc4d387b5a5208037801ce1d2edf1564df32f4d8561b6d867f3f42c418daa5f6019bdb5f088beb0a48afecf2b741f79032b35760a6112546ce45da07121f92afae57b9dfcc7d37fcd4214c040a07b346ddeeccef6b27454e341dbaa774142d89d945a7b417cca5c943bd5ec5d80e2b2a4ff6ed179285fda4d53f81ddf40e35a39a6a66b2d55485c2fc6bd2303c0f2e34e18910e04b0a2e2bc418861e18081835f36e293bad37f262665169e4593367fa282e0502c0641a6b5dd944770d8b1ab6da35d1bafc8abfa88f2713cac42f17bbb9e27240369e17fcb3f27bf84a51d684f52385f6d7db"], &(0x7f0000000180)=0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000300)={0x0, 0x7, 0x8}, 0x8) 00:53:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lookup_dcookie(0x1, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) prctl$PR_SET_FPEXC(0xc, 0x2) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x400140, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) r4 = syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x10004}) r5 = socket$inet(0x2b, 0x1, 0x0) bind$bt_sco(r4, &(0x7f0000000080)={0x1f, {0x93, 0x10001, 0x20, 0x6, 0x3, 0x9}}, 0x8) bind$inet(r5, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) r6 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000280)=""/85) write$RDMA_USER_CM_CMD_GET_EVENT(r3, 0x0, 0xfffffffffffffecf) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5) setsockopt$inet_mreqsrc(r5, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) sendto$inet(r5, &(0x7f0000000300)='\a', 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, &(0x7f0000000380)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="30b65bcbe7b08563d9b976f2f7dbdf26027804fe", @ANYRES32=r7, @ANYBLOB="08000200ac1414aa08000200e000000208000100ac1414bb"], 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) [ 721.998779][T17076] tls_set_device_offload_rx: netdev lo with no TLS offload 00:53:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:13 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xf, 0x0, 0x0) 00:53:13 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'tranb=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000080)) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x40, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000000c0)) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000301ffff00000000000000000000ffed080015000000000008000800690642e40170e197ba45bd09164ec9de219c1392ea3075156e14d91525ac4ef9c5fd1b4c3163d1c49169", @ANYRES32=0x0], 0x24}}, 0x0) 00:53:13 executing program 4: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x8000}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x6, @dev, 'dummy0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:53:13 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="0a5cc8070031afa8b40a08d5bd805d55438ca8ca2fb3b088626fc887ca8cdaf34f4b3dfc7281f3a8267ad879e68792") openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) epoll_create(0x1) write$FUSE_POLL(r1, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x1ff}}, 0x18) getgid() bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) r3 = mq_open(&(0x7f0000000080)='bdev\x00', 0x41, 0xc4, &(0x7f00000000c0)={0x3f, 0x6, 0x94, 0xffffffff, 0x3, 0x10000, 0x1, 0x7}) mq_timedsend(r3, &(0x7f0000000000)="e1bd6cd0afde34321df09a6d21a196923c8789fbec2ea693ba8964b3fe243e2d42cdc1b9eef3721daa36ba559839d6", 0x2f, 0x6, &(0x7f0000000040)={0x1000000000, 0x989680}) mq_timedsend(r3, &(0x7f0000000100)="73b3cafec3dbd277099115feb843043bcd21914a3dd770451ca1844af1702112de1c7734850769393d14c839755a14d817df51fee3f9c0eb552a2c2ed1587ddc4541f459edf88ac4aeb604daa86338ecf4a9ac6ff010cf7c5811", 0x5a, 0x5, &(0x7f00000001c0)) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) connect$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0x5, {0x2, 0xfffffffffffffff9, 0x7, 0x7, 0x100000001, 0x4000000000000}, 0x100, 0x8}, 0xe) ioctl$int_in(r2, 0x5421, &(0x7f0000000900)=0x6) socket$vsock_dgram(0x28, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000a00), 0x73c5d3417c1b93e7, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB="8300000016d45041858856dc4d387b5a5208037801ce1d2edf1564df32f4d8561b6d867f3f42c418daa5f6019bdb5f088beb0a48afecf2b741f79032b35760a6112546ce45da07121f92afae57b9dfcc7d37fcd4214c040a07b346ddeeccef6b27454e341dbaa774142d89d945a7b417cca5c943bd5ec5d80e2b2a4ff6ed179285fda4d53f81ddf40e35a39a6a66b2d55485c2fc6bd2303c0f2e34e18910e04b0a2e2bc418861e18081835f36e293bad37f262665169e4593367fa282e0502c0641a6b5dd944770d8b1ab6da35d1bafc8abfa88f2713cac42f17bbb9e27240369e17fcb3f27bf84a51d684f52385f6d7db"], &(0x7f0000000180)=0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000300)={0x0, 0x7, 0x8}, 0x8) 00:53:13 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trand=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x240, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {0x0}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 00:53:13 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x10, 0x0, 0x0) 00:53:13 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trang=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 722.688225][T17204] XFS (loop5): Invalid superblock magic number 00:53:13 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x11, 0x0, 0x0) 00:53:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x14) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="290000001800190000003fffffffda0602007a00fde80001484000040d0009000005007917060000ff", 0x29}], 0x1) [ 723.113284][T17340] XFS (loop5): Invalid superblock magic number 00:53:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:14 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trano=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:14 executing program 4: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x8000}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x6, @dev, 'dummy0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 00:53:14 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x12, 0x0, 0x0) 00:53:14 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00') fstat(r1, &(0x7f0000000100)) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)=r1) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000080)) 00:53:14 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x13, 0x0, 0x0) 00:53:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x8b) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000040), 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000080)=""/47, &(0x7f00000000c0)=0x2f) 00:53:14 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x4000, 0x0) lseek(r0, 0x0, 0x3) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB]}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0xfffffffffffffff9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3b0000001000ff07000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010065727370616e00000c0002000800030030000000"], 0x3c}}, 0x0) socket$unix(0x1, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xe5, 0x40) write$input_event(r4, &(0x7f00000000c0)={{0x0, 0x7530}, 0x15, 0x1, 0x9bdd}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) perf_event_open(0x0, 0x0, 0xc, r1, 0x9) write$cgroup_int(0xffffffffffffffff, 0x0, 0xff1c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x660c, 0x1a000000) openat$cgroup_procs(r5, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) io_setup(0x0, &(0x7f0000000140)) io_setup(0x1, &(0x7f0000000380)) io_setup(0x800, &(0x7f0000000280)=0x0) io_cancel(r6, 0x0, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) 00:53:14 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'tranq=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:14 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x14, 0x0, 0x0) 00:53:15 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'tranu=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 723.818282][T17462] XFS (loop5): Invalid superblock magic number [ 723.882997][T17492] netlink: 27 bytes leftover after parsing attributes in process `syz-executor.2'. 00:53:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='P\\\x88\x1c'}, 0x48) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x3, 0x0) r1 = getpgid(0xffffffffffffffff) write$FUSE_LK(r0, &(0x7f00000000c0)={0x28, 0xfffffffffffffffe, 0x5, {{0x7ff, 0x10000, 0x2, r1}}}, 0x28) [ 724.046147][T17502] netlink: 27 bytes leftover after parsing attributes in process `syz-executor.2'. [ 724.281351][T17510] XFS (loop5): Invalid superblock magic number 00:53:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:15 executing program 4: mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'bpq0\x00', 0x9100}) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x1a0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_bridge\x00', 0x10) ftruncate(r2, 0x2007fff) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, r1}) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000001c0)=""/63) fgetxattr(r1, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f0000000280)=""/9, 0x9) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={r4, 0x80000, r2}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000200)={0x0, 0x1, 0x5, 0x10, &(0x7f0000ff9000/0x4000)=nil, 0x5}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x13, 0x5}) 00:53:15 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x15, 0x0, 0x0) 00:53:15 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'tranw=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000280)={r2, 0x10}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{}, {}]}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x4}}, 0x26) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x121800, 0x0) write$FUSE_LSEEK(r6, &(0x7f0000000080)={0x18, 0xfffffffffffffffe, 0x5, {0x46}}, 0x18) mmap(&(0x7f0000b87000/0x1000)=nil, 0x1000, 0x2000001, 0x31, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) getsockopt$packet_buf(r5, 0x111, 0x4, 0x0, &(0x7f0000000100)) 00:53:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x2000200) r1 = mq_open(&(0x7f0000000040)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000100)={'veth1\x00', 0xc5f1}) mq_notify(r1, &(0x7f0000000000)={0x0, 0x17}) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f00000001c0)='./file0\x00', 0x4, 0x3, &(0x7f0000000580)=[{&(0x7f00000003c0)="5dfab635d1bb86ffbc755cf450448e363285ce439c1e54fc28e71bf3911b33ad3c69775597de1a1560a1215378f72180eaccd98ac8f77e29088955e337c3cd896954aca47e6518eda4164f9a86e3c68f9b08c53d41d023bd72c857eccdb9d8721d9c6fec658fd1d0a47472051de952b081e0d44a7df601fbfe76fe8f2f68577bb98bda46b1f6161b51d9126faa5d7b340749b070d2459bfa23ee9c41ad", 0x9d, 0xc2bd}, {&(0x7f0000000480)="0c28e7363bf990ab53ca96295dd1f41c054bda4557db9f6f5e3e90075097b7287e7d1b4871636c81f584e8bcf7343c36ea434d3f00788f03530571488142fee741862f83bb5d496799728110fd1bcfd5746aceed553ea8554a7f94b8be3221f357a387ced8dca7efcca0689bb755036a3f5ac2620abddf950d26fd104d7f8eb123be94f0a3892c26bec194840d42c826df377e85325402795ac1aa46e5f7bda8f1a26792ef295fc0b77923ce79d12d7d82d46efe409c7d4ad6188f56a567fc8dc4242742ca7f2469f892fe65c7e566a5e4d1aff7338d74177ab20d9e51cb26817bc8bd35b7", 0xe5, 0x7}, {&(0x7f0000000200)="c9bf4f11127f78bbdd1f71245e4dad931a4cfda1458b7c5ef0798bd0b54ec37b1525a3af0990", 0x26, 0x6}], 0x410, &(0x7f00000007c0)={[{@balloc_test4='block-allocator=test4'}, {@data_writeback='data=writeback'}, {@hash_tea='hash=tea'}, {@balloc_no_unhash_reloc='block-allocator=no_unhashed_relocation'}, {@usrquota='usrquota'}, {@usrjquota='usrjquota'}], [{@pcr={'pcr', 0x3d, 0x35}}]}) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000002c0)=""/249, &(0x7f0000000080)=0xf9) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000680)={0x2, 0x3ff, 0x20af8, 0x0, 0x0, [], [], [], 0x8, 0x1}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000240)={0x6, 0x5, 0x7, 0x4000}) fchdir(r3) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 00:53:15 executing program 3: r0 = socket$inet(0x10, 0x2, 0x100001000c) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000050607031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0xf0}, 0x0) 00:53:15 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x16, 0x0, 0x0) 00:53:15 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'tranx=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:16 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r1, r3, 0x0, 0x800000000024) 00:53:16 executing program 3: r0 = socket(0x10, 0x0, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000001680)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x800, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) [ 724.932431][T17535] XFS (loop5): Invalid superblock magic number 00:53:16 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x17, 0x0, 0x0) [ 725.451315][T17677] XFS (loop5): Invalid superblock magic number 00:53:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:17 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=.d,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:17 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0xc0984124, &(0x7f0000001f64)) write$binfmt_misc(r1, &(0x7f0000000080)={'syz1', "de5cbab9cc55994bc82862db54179f93ee0ad2e9f1166cfc7376659e33e8d642a17c012e0f580e8359df4297b958c5a07cba52450712111d9a6c2ac33cf9664078836b10aa6c8d24fe9a31d3878c5219630b559046d47f4cd8359416c1ec10a0ba8b29a3de91224fdbcdbf11a48cb007a8aacba8c49c1dc8dd2447b90bd639356e960538de3e91b10acc6b35697d3f27a480be28b97743984371015081ce6389f951fbfb04"}, 0xa9) 00:53:17 executing program 2: remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x10000) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40480, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000040)={0x2, 0x3}) r1 = gettid() ptrace$peek(0x1, r1, &(0x7f0000000080)) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xa, 0x0, @tid=r1}, &(0x7f0000000200)) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)={0x7f, 0x6, 0x1, 0x0, 0x0, [{r0, 0x0, 0x400}]}) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000280)={'lo\x00', 0xfffffffffffffff7}) r2 = semget$private(0x0, 0x4, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f00000002c0)=""/52) uname(&(0x7f0000000300)=""/103) waitid(0x2, r1, 0x0, 0x20000000, &(0x7f0000000380)) lsetxattr$trusted_overlay_upper(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='trusted.overlay.upper\x00', &(0x7f00000004c0)={0x0, 0xfb, 0x87, 0x4, 0x7f, "fec68c577df1ce68218f9a22ce5378e6", "639b1e58469007be648bd4b85f2fc99660599b1cee8525bc7b305661cbce9491df41c93c33e43c6b8a010e728cda1ad373c89a31335c04250ec6335f2f3897169131b5e99197bfcaf7879e106df9aff2b11b638a727fa8c951d2c98e9be8774701acd91a3c73554c421109c640ec53363369"}, 0x87, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000580)) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000dc0)=0x4, 0x4) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000e00)={0x1, 0x4, {0x57, 0x4, 0xfffffffffffffc01, {0x4, 0x40}, {0x9, 0x9}, @const={0x0, {0x1, 0x8, 0xcc, 0xfffffffffffffffe}}}, {0x53, 0x6, 0x2, {0x4, 0x7fffffff}, {0x6, 0x7d}, @cond=[{0x13, 0x80000001, 0x800, 0xeb7, 0xfcc, 0x7b3394d6}, {0x9, 0x3, 0x3, 0x10001, 0x931, 0x7}]}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000e80)={{0xffff, 0x7}, 'port0\x00', 0x1, 0x140800, 0x1, 0x3d, 0xd5d3, 0x3, 0x10001, 0x0, 0x3, 0x5}) write$FUSE_WRITE(r0, &(0x7f0000000f40)={0x18, 0xfffffffffffffff5, 0x2, {0x6185817d}}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000f80)) ptrace$peek(0x1, r1, &(0x7f0000000fc0)) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000001000)=""/113) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000001080)=0x8, 0x4) r3 = perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x1f, 0x5, 0x1, 0x1, 0x0, 0x1f, 0x2, 0x5, 0xf9c1, 0x1, 0x2, 0x0, 0x3ff, 0x6, 0xd7ea, 0xae, 0x5, 0x1, 0x5, 0x8, 0xf020, 0x5cc2, 0xfffffffffffffff7, 0x77, 0x5, 0x10001, 0x7f, 0x9, 0x9e, 0x1, 0x2, 0xfff, 0x4, 0xff, 0x1, 0xfffffffffffff01a, 0x0, 0x7, 0x4, @perf_config_ext={0x70, 0x7}, 0x10, 0xffff, 0x3, 0x9, 0xf1c, 0x3ff}, r1, 0x9, r0, 0x1) syz_read_part_table(0x4, 0x5, &(0x7f0000001480)=[{&(0x7f0000001140), 0x0, 0x8}, {&(0x7f0000001180)="85aa0d696793087219eb9c672c0597faeb1fed74fbc92cc97ec2969cc16059b4826901bfd0e9a55840ac0da643ef0af760be0ff7fe1c379e7fe948de1c896081604bfc3a6ec23e450e8ec89c1c4f3edfa2704ff2affe2416f1768cfa59ba69343ece88b2d11d80cab5cbd8dabb3fb5a623d0c9", 0x73, 0x81}, {&(0x7f0000001200)="e010b80e940e77280c78d6d38a2c7c9978997bcaf73112e5de49ef9d98fae31523410f61fd98f32e14d9b8014a79707d5c7b6a3fbfe1b799d7d6f212b42342c5690846015bdbac16a7ea2a68348ed4ee74b171941fa46da1ed0234fc1c5d6b1d411356d736e3c7890b08262a8209f209913da99b721075e21af72ac8480f7e1ed9fba0a22185e25dbb3ca5d9267b1c4435764b8f0b44605d9426827aadd3ac41d45d87c9b23f3d08b687c2df33c7f4a780326df260c809dd225ee9295db40e1a53bb9765f98bd3876a2424569cfae0fec425d7c65126d94cdefca269da01640b0665cda56a6ad4", 0xe7, 0x7f05}, {&(0x7f0000001300)="2700af92b999647868e495addae83a66ac94d106cce6e80decac45c2336ab50ccddb9b01bd0fe569973ae1a0091d2c0efeab244cdabce5f36d81205980bc3e5b1dc0401e52606de1eaedb195fba6eff714847bafd8e617acdaf2b5976ef5b5854c9565ec4782bac2bf4612d001e77aad8f2ce040da1eff164d36e1231c44445f2068b92c4f9fd291674d9d25e1658b4af724bb4bdd405b27d97050ce4ff431d94f82f83cdb483f43635b8300fff0a6558ff7bfa5555aa1b50360f7f82ee6eef7868d4bebda99acad701e0b2abfb9f0e53976d785fc304335316acd5c4aa384d561fda705216355219a41dad122b62ca4985d71", 0xf3, 0x40}, {&(0x7f0000001400)="6990119e60b8c458dfd0fadfe8c500876723cf8da7a969b15289830ad0a990a2541dd7445e0c53e0fecb0320ac6b968da050f4158d2d27983c2cd124afa5c8a93d256c6aeea01b743e89ba0a095ef7ac54d976a8905c8fc8d0237eedac9fb98a6fb7e5a59e38544417fc41674f605ba57f4f066e93e0a4", 0x77, 0x5}]) ftruncate(r3, 0x5) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000001500)={'security\x00'}, &(0x7f0000001580)=0x54) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vga_arbiter\x00', 0x2001, 0x0) gettid() 00:53:17 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x18, 0x0, 0x0) 00:53:17 executing program 3: r0 = epoll_create1(0x0) prctl$PR_GET_KEEPCAPS(0x7) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0xffffffffffffffe}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x1c2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) 00:53:17 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x19, 0x0, 0x0) [ 725.972698][T17699] 9pnet: Could not find request transport: .d [ 726.011450][T17776] 9pnet: Could not find request transport: .d 00:53:17 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x501000, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x8000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r0, r1, 0x0, 0x2}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, r2, 0x2}, 0xc) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000240)) getsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000280)=""/197, &(0x7f0000000380)=0xc5) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000400)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bridge0\x00', r2}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x14c, r4, 0x18, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0xb4, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xbe87}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x74, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x80}}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40001}, 0x40090) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000680)) r6 = socket$inet(0x2, 0x4, 0x101) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000006c0)={0x1, r0}) ioctl$SIOCRSACCEPT(r0, 0x89e3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0xfffffffffffffffd, 0x100}, &(0x7f0000000840)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000880)={r7, 0x3f8, 0x7f}, &(0x7f00000008c0)=0x8) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000900)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@rand_addr=0x6, 0x4e22, 0x0, 0x4e21, 0x1, 0xa, 0x80, 0x20, 0x3f, r2, r3}, {0xde2, 0x3f, 0x3fc0000000000000, 0x1719, 0x10001, 0x5, 0x914, 0x2}, {0x80000001, 0x1ff, 0x5, 0x4}, 0x8, 0x6e6bb2, 0x0, 0x0, 0x2, 0x1}, {{@in6=@remote, 0x4d4, 0xff}, 0xa, @in6=@mcast2, 0x3500, 0x1, 0x1, 0x4, 0x7, 0x1, 0xb9}}, 0xe8) bind$packet(r1, &(0x7f0000000a80)={0x11, 0xff, r5, 0x1, 0x111d0cca, 0x6, @broadcast}, 0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000b80)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000ac0)="e3319befbcfe5d1e620462210b657258bbd821bde8846c613ea30da8406581916f2ea490c97544bd705de8733cee777e14084c1caff65b9ea7e13827b3b43a03f7589146b4d123b3f731ca88a264c9702b5d36ed0b51c1413297135179deab55e065f697a11692c9ad237050de21cc69fa6ea78b01427dfa0799b75cd7ed7f0f57d0f6fc2dd6f28763fce35f59dc", 0x8e, r6}, 0x68) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000c00)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000c40)={0xff}, 0x1) accept4$tipc(r1, &(0x7f0000000c80)=@id, &(0x7f0000000cc0)=0x10, 0x80800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000d00)={'caif0\x00', r5}) getsockname(r1, &(0x7f0000000d40)=@nfc_llcp, &(0x7f0000000dc0)=0x80) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000e00)={0x0, 0x0, 0x1, 0x7}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000e40)={0x4, r8}) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000e80)={'veth1_to_team\x00', 0x3, 0x5}) 00:53:17 executing program 2: r0 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x80000) geteuid() sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/188, 0xbc}], 0x1) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 00:53:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000280)=""/135, 0x74f) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = socket$inet6(0xa, 0x803, 0x3) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, 0x0, 0x4000005) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) pipe(0x0) syz_genetlink_get_family_id$ipvs(0x0) prctl$PR_GET_SECCOMP(0x15) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x4000084) dup3(r1, r0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x1b3, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0xfc44}], 0x1000000000000074, 0x0, 0xfffffffffffffd9e}, 0x100) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 00:53:17 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=/d,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:17 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1a, 0x0, 0x0) [ 726.173670][T17751] XFS (loop5): Invalid superblock magic number [ 726.244319][T17863] 9pnet: Could not find request transport: /d [ 726.261284][T17919] 9pnet: Could not find request transport: /d 00:53:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:18 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1b, 0x0, 0x0) 00:53:18 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x2, 0x1}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x104400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) umount2(&(0x7f0000000180)='./file0\x00', 0xf) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:53:18 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fI,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:18 executing program 3: socketpair(0x4, 0x400000000004, 0x6, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080)}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000300)='gre0\x00') [ 726.959306][T17956] 9pnet: Could not find request transport: fI [ 727.003089][T17998] 9pnet: Could not find request transport: fI 00:53:18 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1c, 0x0, 0x0) 00:53:18 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) r1 = semget$private(0x0, 0x3, 0x4) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) getuid() stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000240)={{0x0, r2, r3, r4, r5, 0x107, 0x85}, 0x6, 0xfffffffffffff601, 0xfffffffffffffffe}) getpeername(r0, 0x0, 0x0) 00:53:18 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fQ,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:18 executing program 3: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='bpq0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa0240, 0x80) r2 = accept4$nfc_llcp(r1, 0x0, &(0x7f00000000c0), 0x80800) ioctl$int_in(r2, 0x5473, &(0x7f0000000100)=0x4) write(r0, &(0x7f0000000000)="2400000052001f0014f9f407000904000a00071008000100040000000800000000000000", 0xfc) [ 727.165670][T18011] XFS (loop5): Invalid superblock magic number 00:53:18 executing program 4: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000200)=@rc, &(0x7f0000000300)=0x80, 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@ipv4={[], [], @empty}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000480)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000004c0)={@empty, r1}, 0x14) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x5, 0x370) ppoll(&(0x7f0000000000)=[{r2, 0x8180}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000180)={'bridge0\x00\x00\x00\x00\x80\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="2319fa88966f85bddaafde9c29a782834cb14b2779fb0c87aa70d39817147eab0846dd4461a15d070104d79df474dc4214cc0a74bc55c583c1ab0f59a58cb1ccd9a54fb0da1ebfbeb0cbbefd78c8115c3c93e0d8d3269c5709814e12782e5a2fa2fa3d014c2eec27b8e0f65f440fe8b0682d125f343fffb8"]}) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000000)={@mcast1, 0x0}, &(0x7f0000000040)=0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000080)={@mcast1, r4}, 0x14) accept(r2, 0x0, &(0x7f00000000c0)) 00:53:18 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1d, 0x0, 0x0) 00:53:18 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000003480), 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x101080, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000080)={0x10000000, 0xc, [0xfffffffffffffc00, 0x69, 0x0]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) [ 727.265297][T18193] 9pnet: Could not find request transport: fQ [ 727.304614][T18197] 9pnet: Could not find request transport: fQ [ 727.609828][T18317] XFS (loop5): Invalid superblock magic number 00:53:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:19 executing program 3: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x80800) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x37, 0x119, 0x0, 0x0, {0x8}, [@typed={0x8, 0x2, @fd}]}, 0x1c}}, 0x0) 00:53:19 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fR,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:19 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1e, 0x0, 0x0) 00:53:19 executing program 4: syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8001, 0x10000) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '%'}, {0x20, 'vmnet1*ppp16^keyringvboxnet0@'}, {}, {}, {0x20, 'gfs2\x00'}, {0x20, 'vmnet1&&'}, {0x20, 'gfs2\x00'}, {0x20, 'gfs2\x00'}], 0xa, "068621abf985801cd8dffd7de84decc821343fc23e7c5449a9e1d79c2ffd113b1c41"}, 0x6a) 00:53:19 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x2) read(r0, 0x0, 0x246) [ 728.044434][T18332] 9pnet: Could not find request transport: fR 00:53:19 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x21, 0x0, 0x0) 00:53:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x10000, 0x10400) fcntl$notify(r1, 0x402, 0x2) fstat(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000780)=0x0, &(0x7f00000007c0), &(0x7f0000000800)) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000840)={0xa0, 0xffffffffffffffda, 0x2, {{0x0, 0x2, 0x1000, 0x1, 0x0, 0x400, {0x3, 0x3ff, 0x0, 0x3, 0x5, 0x4, 0x7fff, 0x801000000000, 0x6, 0x401, 0x3, r2, r3, 0x8, 0x6}}, {0x0, 0x5}}}, 0xa0) write$FUSE_LSEEK(r1, &(0x7f00000001c0)={0x18, 0x0, 0x4, {0x8}}, 0x18) ioctl(r0, 0x33b4, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000240)=@security={'security\x00', 0xe, 0x4, 0x440, 0x0, 0x218, 0x218, 0x0, 0x120, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000200), {[{{@ipv6={@mcast1, @remote, [0xffffffff, 0xffffff00, 0xffffffff], [0xff000000, 0xffffffff, 0xffffff00, 0xffffffff], 'veth1_to_hsr\x00', 'hwsim0\x00', {}, {0xff}, 0xbe, 0x1, 0x4, 0x4}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x7f, 0x80000000, 0xe18, 0x7, 0xffffffff, 0x144, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x25}}}, {{@uncond, 0x0, 0xc8, 0xf8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3f, 0x40, 0x800}}}, {{@uncond, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x5c, 0x5, 0x6, 0x0, 0x30000000, 0xc4, 0x1221}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 0x4e21, 0x4e22, 0x4e23, 0x4e22, 0x1, 0x6, 0x7f, 0x4, 0x8}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffffffffffee) openat$cuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/cuse\x00', 0x2, 0x0) userfaultfd(0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000008000000b4060000ffffffff2d020000000000e556b35eb800650404000100000004040000850000001f000001b700e4140000000000000000000000000000000000000000"], 0x0}, 0x48) socket$inet6(0xa, 0x2, 0xfd9) ioctl(r5, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0xa, 0x40000000003, 0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$TIOCGSID(r7, 0x5429, &(0x7f00000004c0)=0x0) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f00000002c0)=r9) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x89a2, &(0x7f0000000900)={'bridge0\x00\x00\x01\x00', 0x4}) r10 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e20, 0x3, @remote, 0x7fffffff}, {0xa, 0x4e24, 0x2, @local, 0x8000}, 0x1, [0xa397, 0x7fffffff, 0x2, 0x2, 0x0, 0x1, 0x2, 0x2]}, 0x5c) write$binfmt_misc(r6, &(0x7f0000000c40)=ANY=[], 0x0) close(r7) dup3(r6, r10, 0x0) 00:53:19 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x480000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x148, r1, 0x520, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2b4f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x68, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf042}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4409}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d91c4e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x840}, 0xf10dcc847b951d28) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x4, 0x0) ioctl$TUNGETFILTER(r2, 0x90009427, &(0x7f0000000140)=""/190) [ 728.089308][T18426] 9pnet: Could not find request transport: fR 00:53:19 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000040)='%mime_type-eth0\xca\x00', 0x6) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x400002, 0x0) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f00000003c0)=@netrom) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x100) sendfile(r0, r1, 0x0, 0x102002700) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x410040, 0x0) pipe2(&(0x7f0000000200), 0x800) r4 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) r5 = accept$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000280)=0xfffffffffffffd59) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000005c0)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x507, @empty}, @in6={0xa, 0x4e24, 0x1, @empty, 0x7f}, @in6={0xa, 0x1, 0xe5cc, @mcast1, 0x1}, @in6={0xa, 0x4e24, 0x7, @mcast2, 0x60e}], 0x75) 00:53:19 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fS,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 728.218482][T18417] XFS (loop5): Invalid superblock magic number 00:53:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x3) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getgroups(0x8, &(0x7f0000000480)=[0xee00, 0x0, 0xffffffffffffffff, 0x0, 0xee00, 0x0, 0xee00, 0xee01]) sendmsg$unix(r1, &(0x7f0000000500)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000180)="bc2c2de2ec053197c772b83ee01bbb01c8799ea6b94f3b3ba3f484cc3fa895514c05cce165f5bcf0dabe9629b8844c264731e05b313cb3ca1ffa06aa2863b4c0e6ba4eac5f4afeebd71181195b8fab533eb279d328957bba867fb6bc537299ef02a0488aba99d335b3b7a6dd5697ff0021ae2755d027c95572ac3ab732acf6dec0", 0x81}, {&(0x7f0000000240)="5411cf2badb4036b6b5fb15dc29c1b5795c86cefed2d42127388334fc64161982c71426eef767ee5c97946742a", 0x2d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="a5b7b46852269dfa68", 0x9}], 0x5, &(0x7f00000004c0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x48000}, 0x40) [ 728.345730][T18499] 9pnet: Could not find request transport: fS [ 728.370703][T18569] 9pnet: Could not find request transport: fS 00:53:20 executing program 2: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c80], 0x0, 0x0, 0x0}, 0x108) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, {0x9, 0x0, 0xfffffffffffffcbc, 0x101, 0x8001, 0x200}}, 0x8) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000800)={r0, r0, 0x7ff, 0x97, &(0x7f0000000740)="87af63a786e8e66814b0c6479761dce67c67f318f4eeb7390246eae7ffb24a52b9fc369a634518605f794d61b9e5746757fa711acbbc4ab86c687b358b6cf8a10a4599441ad1fd7ed365db50c0558bc38c454b91e0445e1cbc00fa92d8eeef08646db7745d179f347359e192c1f240835d1226575a7ad53e801a7a1eff9a8f978ea8b282916f503b2f62fa1fa94c0a6be835d88709924e", 0x7, 0xfffffffffffffff9, 0x7, 0x8, 0x8, 0x2, 0x101, 'syz0\x00'}) chdir(&(0x7f0000000300)='./file0\x00') mkdirat(r0, &(0x7f0000000080)='./file2\x00', 0xf6) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') write$P9_RLOCK(r0, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x1}, 0x8) 00:53:20 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x22, 0x0, 0x0) 00:53:20 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fT,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:20 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x5c56cdb8, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc008561b, &(0x7f0000000140)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4080, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth1\x00', 0x200}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 00:53:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:20 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8001, 0x20000) accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x1c, 0x80800) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/157, 0x9d}, {&(0x7f0000000240)=""/131, 0x83}], 0x2, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000140)={0x7, 0x2, 0x7, 0x6}) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 729.174397][T18696] 9pnet: Could not find request transport: fT 00:53:20 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x23, 0x0, 0x0) 00:53:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00\x00\x00\x00 \x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="cd5f3a8d822a"}, 0x14) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x4) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)={0x6, 0xc, 0x4, 0x40001020, {}, {0x7, 0xe, 0x7, 0x400, 0x19f4, 0xffffffffffffd697, "3c3b59ff"}, 0x9, 0x0, @userptr=0x3, 0x4}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x300, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) [ 729.222970][T18766] 9pnet: Could not find request transport: fT [ 729.230215][T18694] overlayfs: unrecognized mount option " ÇÄ$ìüsM?je`¾CžŸÙ9“¼ab{ÐäÑg]yÑÂ]‘~»$ÔˆPjþx‰£>-èìûZÅ÷ß‘³ß6Ý¥^¾4ÜÚÕ’Ùyês¾!t² ¡Á~wHw‘6Œ5I¦Œ8èQqïb:=;ºÕÉ9\Ž×º›ÌÔ¢jzŽ2³kƒÈPÚ¾" or missing value 00:53:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000001c0)={{0x88aa, 0x90, 0x5, 0x1}, 'syz0\x00', 0x33}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) shutdown(r4, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, 0x0, &(0x7f00000000c0)) open$dir(&(0x7f0000000100)='./file0\x00', 0x402080, 0x41) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x483, @loopback}, 0x1c) 00:53:20 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fV,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:20 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x24, 0x0, 0x0) [ 729.382389][T18694] overlayfs: unrecognized mount option " ÇÄ$ìüsM?je`¾CžŸÙ9“¼ab{ÐäÑg]yÑÂ]‘~»$ÔˆPjþx‰£>-èìûZÅ÷ß‘³ß6Ý¥^¾4ÜÚÕ’Ùyês¾!t² ¡Á~wHw‘6Œ5I¦Œ8èQqïb:=;ºÕÉ9\Ž×º›ÌÔ¢jzŽ2³kƒÈPÚ¾" or missing value 00:53:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x2) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000280)=0x47) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) memfd_create(&(0x7f0000000140)='filter\x00', 0x7) ioctl$LOOP_SET_STATUS(r0, 0x4c08, 0x0) [ 729.447400][T18804] XFS (loop5): Invalid superblock magic number 00:53:20 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x25, 0x0, 0x0) 00:53:20 executing program 2: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x7ff) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x5, @local, 0x1}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x1, @local, 0x1000}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x27c00000, @empty, 0x1}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0x10001, @loopback, 0x7}], 0xfffffffffffffef4) [ 729.624898][T18908] 9pnet: Could not find request transport: fV [ 729.659264][T19011] 9pnet: Could not find request transport: fV 00:53:20 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fb,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000003) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, r2, 0x415, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0) [ 729.894015][T19047] 9pnet: Could not find request transport: fb [ 729.927848][T19048] 9pnet: Could not find request transport: fb 00:53:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:21 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000001bc0)="24000000070a07061dfffd946fa2830020200a0009000108000000680c1baba20400ff7e", 0xfffffffffffffc28}], 0x1}, 0x0) 00:53:21 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x26, 0x0, 0x0) 00:53:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)=""/4096, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:53:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2400000003061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 00:53:21 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fg,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:21 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000000c0)="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") getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000001c0)={r2, 0x61f, 0x30, 0x8, 0x4}, &(0x7f0000000200)=0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000003c0)) close(r3) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000380)=0x101) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000002c0)={r2, 0xffffffffffffffff, 0x0, 0x22, 0x3fc0}, &(0x7f0000000300)=0x18) socket$netlink(0x10, 0x3, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="580000001400192340834b80043f67", 0xf}], 0x1) socket$inet(0x2b, 0x1, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) fallocate(r0, 0x0, 0x70b, 0x400) 00:53:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x4000) write$FUSE_STATFS(r1, &(0x7f0000000180)={0x60, 0x0, 0x3, {{0x4, 0xff, 0x800, 0x1, 0xe000000000000000, 0x1f, 0xffff}}}, 0x60) read(r1, &(0x7f0000000140)=""/32, 0x1) ioctl$int_in(r1, 0x800000c0045009, &(0x7f0000000100)) write$P9_RVERSION(r1, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x7, 0x8, '9P2000.u'}, 0x15) [ 730.338672][T19067] 9pnet: Could not find request transport: fg [ 730.377505][T19074] 9pnet: Could not find request transport: fg 00:53:21 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x27, 0x0, 0x0) 00:53:21 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fq,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:21 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x10000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f00000000c0)={0xfffffffffffffffe, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534b, &(0x7f0000000000)) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000100)='syz0\x00') [ 730.499018][T19072] XFS (loop5): Invalid superblock magic number 00:53:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @broadcast, [], {@canfd={0xd, {{0x2, 0x2684000000000000, 0x10001, 0x7f}, 0x1b, 0x3, 0x0, 0x0, "1d05f02de2d3cf9e92af81c3e1ea0dd669a9b01e959cf432a2ee1984fead83955a4e0acb6a13138409254c81ad8db012ee16af92ced2f0bd7fe7a6ee33cbfbc2"}}}}, &(0x7f00000000c0)={0x1, 0x1, [0xd2c, 0xe8b, 0x6ee, 0x3e3]}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000100)={'netdevsim0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}}) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x20400200, 0x4) [ 730.610881][T19298] 9pnet: Could not find request transport: fq [ 730.646223][T19302] 9pnet: Could not find request transport: fq 00:53:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:22 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x28, 0x0, 0x0) 00:53:22 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) io_setup(0x8, &(0x7f0000000140)=0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16, @ANYRES32]]], 0x8) r4 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r5, r5}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={'crct10dif\x00'}}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x4) io_getevents(r3, 0x0, 0x0, 0x0, 0x0) io_submit(r3, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000140), 0x5ee}]) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x40002, 0x0) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f0000000640)={0x0, 0x0, 0x2080}) 00:53:22 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0xfffffffffffffeec, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000008000000b4060000ffffffff2d020000000000e556b35eb800650404000100000004040000850000001f000001b700e4140000000000000000000000000000000000000000"], 0x0}, 0x48) socket$inet6(0xa, 0x2, 0xfd9) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x1f, 0x3, 0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000004c0)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000002c0)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r6 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r7 = dup3(r2, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="02090000020000000000d5a254260223828dae000000000000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010b00000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, &(0x7f0000000180), 0x400000000000117, 0x0) syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r9, r10/1000+30000}, {0x77359400}}) 00:53:22 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fs,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) clone(0x2102801ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000400)=0x0) io_getevents(r1, 0x101, 0x800000d, &(0x7f0000000440)=[{}], 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 00:53:22 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x29, 0x0, 0x0) [ 731.365997][T19436] 9pnet: Could not find request transport: fs 00:53:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socket$unix(0x1, 0x3, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 731.415378][T19456] 9pnet: Could not find request transport: fs [ 731.434918][T19434] XFS (loop5): Invalid superblock magic number 00:53:22 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2a, 0x0, 0x0) 00:53:22 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fu,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:22 executing program 3: mkdir(0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000740)='/dev/cachefiles\x00', 0x80000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdir(0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000340)={'NETMAP\x00'}, &(0x7f0000000540)=0x1e) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x300, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x4108, 0x0, {0x18, 0x18, {0x35, @bearer=@l2={'ib', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0xc040) unshare(0x8000000) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) statfs(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=""/187) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000480)=0x32) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000004c0)=@assoc_id=r7, &(0x7f0000000500)=0x4) 00:53:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") unshare(0x50000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x27, r2, 0x1, 0x70bd27, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev, 0x1004000000}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @ipv4={[0xf0ffff], [], @local}}}}}]}]}, 0x6c}}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x80) recvmsg$kcm(0xffffffffffffff9c, &(0x7f00000006c0)={&(0x7f00000001c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f00000003c0)=""/161, 0xa1}, {&(0x7f0000000480)=""/238, 0xee}], 0x3, &(0x7f00000005c0)=""/216, 0xd8}, 0x0) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x400, 0x2080) bind$packet(r3, &(0x7f0000000700)={0x11, 0x1b, r4, 0x1, 0x7, 0x6, @broadcast}, 0x14) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000780)={&(0x7f0000000140), 0xc, &(0x7f0000000740)={&(0x7f0000000180)={0x24, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40008c0) [ 731.627181][T19558] 9pnet: Could not find request transport: fu [ 731.662706][T19564] 9pnet: Could not find request transport: fu [ 731.691037][T19566] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.4'. 00:53:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = getpid() fcntl$lock(r0, 0x24, &(0x7f0000000580)={0x0, 0x1, 0x8020000, 0x3, r1}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x8000, 0x0) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000300), 0x4) socketpair$unix(0x1, 0x8000000005, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_IO(r2, 0xc0481273, 0x0) r5 = perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8004) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fchdir(r6) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000440)) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) syncfs(r7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x89, 0x5}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000240)={{0xff, @local, 0x0, 0x0, 'lblc\x00', 0x2, 0x33, 0x2}, {@empty, 0x4e22, 0x10000, 0x9, 0x1f, 0x1}}, 0x44) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000480)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000000340)) write$nbd(r8, &(0x7f0000000880)=ANY=[@ANYBLOB="67446698010000000400020001000000450a69560704405c67dde72ce60f3afefa023ef51aee3b1204b818a7d7f5bf2823a34f93da60cb085633f5cef13145a49728132e2f5eeb4bb9f08752b38c8294d82bc633248ff58394dd9efb8266c055e5275d03ee3927af147889def12cfd025bb4d490afdccf4931a698694ee6c2c57d02ec2bf9d40a9ab087bff32d777a75af385a2ac7529ba54a487f241c7b63f533cf9ff079dfd4fab839847d097192868aec11ab53efc139091321e9424458db19682cca9517d0d6543af49f46af9e4f8d00e708506d1266b4650ba0359349543aceabf7c459a548b48ab0080d8384bf084ab00293ff4ee9e905f15b7701d03c309ad35e9940408035e1a4063371b18caf7e0d3838449062ac493452c6c6"], 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8, 0x80000) lsetxattr$security_evm(&(0x7f0000000380)='./bus\x00', &(0x7f0000000400)='security.evm\x00', &(0x7f00000003c0)=ANY=[@ANYRESHEX=r5], 0x1, 0x0) write$binfmt_aout(r8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x108) sendfile(r8, r8, &(0x7f0000000000), 0x8080fffffffe) 00:53:23 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2b, 0x0, 0x0) 00:53:23 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fw,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:23 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x440, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000140)={'yam0\x00', 0x8, 0xfffffffffffffff7}) write$apparmor_current(r0, &(0x7f0000000100)=@hat={'changehat ', 0x0, 0x5e, ['changeprofile ']}, 0x2b) 00:53:23 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000000)=0xfffffffffffffb48) socket(0x10, 0x80002, 0x0) r1 = gettid() getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, 0x0, &(0x7f0000000380)) syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x0, 0x2) r2 = syz_open_procfs(r1, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) socket$inet(0x2, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) process_vm_writev(r1, &(0x7f0000000000), 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/231, 0xe7}], 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x100000000, @remote, 0x8}}, 0x3ff, 0xfffffffffffffffe}, &(0x7f0000000040)=0x90) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, 0x0) kcmp(r1, r1, 0x0, r4, r3) r5 = getgid() ioctl$TUNSETGROUP(r3, 0x400454ce, r5) close(r3) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 732.320423][T19787] 9pnet: Could not find request transport: fw 00:53:23 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2c, 0x0, 0x0) [ 732.379791][T19787] 9pnet: Could not find request transport: fw 00:53:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffff9, 0x2000) bind$alg(r0, &(0x7f00000015c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:53:23 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'r.dno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 732.484113][T19835] XFS (loop5): Invalid superblock magic number 00:53:23 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2d, 0x0, 0x0) 00:53:23 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200000, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000100)={0x21, 0x101, 0x9, 0xa, 0x8, 0x81}) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0x0, 0x2}, 0x10) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="0201a9ffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1bd}]) [ 732.727892][T20053] 9pnet: Insufficient options for proto=fd [ 732.729870][T20015] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) 00:53:23 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2e, 0x0, 0x0) [ 732.790304][T20130] 9pnet: Insufficient options for proto=fd 00:53:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clock_nanosleep(0x7, 0x1, &(0x7f0000000040), &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 00:53:24 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000000)={0x2, 0x1, [0xbcb, 0x1, 0xc2, 0x9, 0x2, 0x99, 0x10000, 0x8]}) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 00:53:24 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'r/dno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:24 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2f, 0x0, 0x0) 00:53:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x800, 0x802) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000001c0)={{0x3, 0x0, 0x7fffffff, 0x4, 'syz1\x00', 0x2}, 0x4, 0x400, 0xfffffffffffffffa, r2, 0x5, 0x80, 'syz1\x00', &(0x7f0000000080)=['(ppp1nodevposix_acl_accesseth1security(\x00', '+\x00', 'hash\x00', '{ppp1-\x00', 'hash\x00'], 0x3b, [], [0x575, 0x400, 0x3, 0x1]}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 00:53:24 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x30, 0x0, 0x0) 00:53:24 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x3, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000500)="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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x12000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, r2}}, {@fscache='fscache'}, {@cache_loose='cache=loose'}, {@cache_none='cache=none'}, {@nodevmap='nodevmap'}, {@version_L='version=9p2000.L'}, {@access_user='access=user'}, {@noextend='noextend'}], [{@smackfstransmute={'smackfstransmute'}}, {@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, r3}}, {@permit_directio='permit_directio'}, {@uid_lt={'uid<', r4}}]}}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002200010000000000000400000500000008001100e20900007d61578d67591b31e642145e7e4c5da2ef6803a4d29bc26b8be36fe6bfae4b3d04db080ba11212d22ddae04782165bfa87c3f6dd1c0f25ff10ed3d3bdfb401ef583b32493801b6f7147aad81253d48da5719685ebe7c3a9f57dc45440ce0732cd78b9cbdd3cb6fa274a9036e5ab07b9420c1077a0f8c30025b09e59cb78e79b096a909"], 0x1c}}, 0x0) [ 733.345933][T20159] 9pnet: Insufficient options for proto=fd [ 733.381336][T20202] 9pnet: Insufficient options for proto=fd 00:53:24 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfIno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:24 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x31, 0x0, 0x0) 00:53:24 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10000000000000) r0 = socket$netlink(0x10, 0x3, 0xf) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400000, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000080)=0x8) setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000040)=0x1f, 0x4) [ 733.543908][T20196] XFS (loop5): Invalid superblock magic number 00:53:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x609, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="24000000020807031dfffd946ff20c0020200a8009000500021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000000000000000000000", 0x4c}], 0x1}, 0x0) clock_gettime(0x7, &(0x7f0000000000)) [ 733.610200][T20291] 9pnet: Insufficient options for proto=fd [ 733.629634][T20294] 9pnet: Insufficient options for proto=fd [ 733.691345][T20327] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 733.721914][T20327] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 734.008231][T20400] XFS (loop5): Invalid superblock magic number 00:53:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:25 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x32, 0x0, 0x0) 00:53:25 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfQno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x40000000000000}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) r2 = getuid() r3 = getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) r5 = getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) r7 = getgid() stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() getresuid(&(0x7f0000000240), &(0x7f0000000580), &(0x7f00000005c0)=0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = geteuid() r13 = getegid() r14 = getuid() r15 = getegid() write$FUSE_DIRENTPLUS(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="900400000000000007000000000000000500000000000000000000000000000002000000000000000300000000000000000000000100000000000000000000003c0000000000000000000000000000003f0000000000000092a60000000000000080000000000000000001000600000001feffff0700000003000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="06000000030000000000000004000000000000000300000000000000070000000300000054495043763200000200000000000000010000000000000001040000000000f17602000000000000a50000000200000003000000000000001c0f00000000000009000000000000000800000000000000e7c2000000000000ff0f0000000000000001000001010000000200008b00000006000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="03000000b80a000000000000050000000000000000100000000000000a00000002000000766d6e65743175736572000000000000020000000000000001000000000000000001000000000000faffffffffffffff080000000500000006000000000000000000000000000000010000000100000004000000000000003f0000000000000008000000000000000000000005000000cb0700000400000006000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="01040000d1010000000000000300000000000000020000000000000001000000000100005b000000000000000300000000000000030000000000000004000000000000000100000000000000810000001f00000000000000000000000100000000000000010000000000000006000000000000000800000000000000a3bb00000000000000000100050000000000000007000000970f0000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="040000000200000000000000050000000000000001010000000000000700000001800000544950437632000005000000000000000000000000000000fd0e000000000000de0000000000000009000000ed45000006000000000000003a00000000000000d1030000000000003f000000000000000004000000000000080000000000000000000080f9ffffff050000000008000002ffffff", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="010000000900000000000000050000000000000002000000000000000f0000001e0900005d73656c6673797374656d62646576000200000000000000000000000000000002000000000000000000000000000000070000000400000005000000000000000000000000000000050000000000000080000000000000007f00000000000000ff03000000000000faffffffcc730000060000004a00000005000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="3469000001040000000000000400000000000000675f00000000000009000000000000802876626f786e65743100000000000000010000000000000000000000000000000600000000000000ffffffff0000000001000000ff070000050000000000000008000000000000000104000000000000000000800000000005000000000000000100000000000000fa00000006000000ffffff7f0200000007000000", @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="ffff000008000000000000000000000000000000c7010000000000000b00000000000000757365726c6f776c616e310000000000"], 0x490) r16 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r16, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r17 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r17, @ANYBLOB="010000000000000000000200dc00"], 0x14}}, 0x0) 00:53:25 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)=@sco={0x1f, {0x608}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) connect$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) timer_create(0x7, &(0x7f0000000300)={0x0, 0x1a, 0x0, @thr={&(0x7f0000000180)="12a9d7da5704a40cb7fdea3e4eef54fc561c12540601bd26ea90ab5313e6ce46182db17408994f22370622e5e928cf069cbe9642909d9f31f34bd6c4417e62c6cd1c647be289b71e7f0782864c40d7840979899dfeace5d8f8c60597fa79126b5f375780a8058c5c378045290dd8155acbcc5d24ca4236f58de9c11255609efd68567732a1", &(0x7f0000000240)="617d0cb7be781e5f67d73848e7f70377f237f9bf95c3d79a115a5a3f8bbb0d375d6c5e8df11db787ec3ad8215f9144f09543f0cc6aba2c7e7ead143d5d9da4fa8021d98b37e6e19926f8b3604fe6ae"}}, &(0x7f0000000340)=0x0) prctl$PR_GET_TIMERSLACK(0x1e) timer_settime(r2, 0x0, 0x0, 0x0) msgget$private(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000400)="c14305000000400000000000ac14140deb10c140f9e848a09686c948a2594436376030642e2aff5ee0610b3fe91e4202ecd4b56a047cc32e869ce0fffffeffffffffff4f3585bb9f7d", 0x49}], 0x1}, 0x0) 00:53:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x20000) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 00:53:25 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x33, 0x0, 0x0) [ 734.549995][T20518] 9pnet: Insufficient options for proto=fd 00:53:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) munlockall() sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x6, 0x280002) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x7ff}, 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680)='/dev/hwrng\x00', 0x0, 0x0) r3 = add_key(&(0x7f00000003c0)='ceph\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000700)="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", 0x1000, 0xfffffffffffffffd) request_key(&(0x7f0000000240)='ceph\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)=')\x00', r3) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x332, 0x253, 0x8, 0x3ff, 0x0, 0x0, 0x400, 0xb, 0x4, 0x7ff, 0xfffffffffffffffd, 0x7f, 0x101, 0x7b, 0x9, 0x2ec, 0x5, 0x7, 0x6, 0x401, 0x6, 0x0, 0x4269, 0x1, 0xfb, 0x7fffffff, 0x2, 0xf6d, 0x5, 0xb7, 0x1ff, 0x6, 0xae26, 0x2, 0xf446, 0x400, 0x0, 0x3, 0x3, @perf_bp={&(0x7f0000000440), 0xf}, 0x20e1, 0x0, 0x7fff, 0x4, 0xce2, 0x7, 0xfffffffffffffff8}, r4, 0x6, 0xffffffffffffff9c, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000006c0)={r0}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000000000020000627c05000500000000000a00000000000000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="020a000002000000000000000000000063772e52c7731b3945e09a2e3687614eb4832dd059f355f5314a90ece376b9d32df8e64159ffd91249c77c0a10a65fea17f51127cefd61930622961a46f829f4935666007979aff890da7d990acf34492c0205fb27035534b4585ccd37368b5a59cf8fb7d1edcdac51eb6b14850fa03549dbe58c4b8d2bcb5a5ed2a6d504efa6122eeb279b7b211630abdd92f59a4823afe0c030f5"], 0xa5}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 00:53:25 executing program 3: mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x7fffffffffffa, 0x10, 0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x5411, &(0x7f0000000000)) [ 734.594836][T20615] 9pnet: Insufficient options for proto=fd 00:53:25 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfRno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:25 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x34, 0x0, 0x0) 00:53:25 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x140000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) [ 734.680163][T20571] XFS (loop5): Invalid superblock magic number [ 734.792670][T20648] 9pnet: Insufficient options for proto=fd [ 734.827989][T20656] 9pnet: Insufficient options for proto=fd 00:53:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:26 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x35, 0x0, 0x0) 00:53:26 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0xe7, "c6d79d460c5e9185e0414daeefcee8acdaa4e19f66e7c5ad586b4d631ccd7735f0b79194e271508ba644d4c02fbe4e1dadf604ac70c4fbcb34e2f3a7d558fa9baf265f2a7139d340c0b7d981cdb04f73c14391360cb1e206e3ed9bd26f6029ebfc45aab1bdb8311bb582f350d6a97fdbb68596b89c14cb93bf7e53532904efbf66f6b4294d75ecb0967ad5534e578cc38aec9112574c379a525cc4103b40401a17ab5dadec2f911f37fb9b03fef5c0f224e187a3bb4abcdfb35246f71597ec44e9511d588515769471e3c536c2a2a90e222d413ca8e1b033c0643d5a4c858ac56738d6e6587a63"}, &(0x7f0000000280)=0xef) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0x8000, 0x1, 0x8001, 0x1, r2}, &(0x7f0000000300)=0x10) sendto$inet(r1, &(0x7f0000000000)="0255b8e04ebdfa8d889c492ef7889879fb862ce86b37e6799cb4704962b13545fddab7ff47aae485a71621668cef5bed9a4535c70cb2", 0x36, 0x40010, &(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000010000/0x10000)=nil, 0x10000}, 0xffffffffffffffff}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)=0xff, 0x4) io_setup(0x9, &(0x7f0000000100)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000010000/0x4000)=nil, 0x4000}) 00:53:26 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfSno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:26 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x300605, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaabaa00000000000086dd111a95d0478b6a60b409000002880006000000000000000000ffffe0000002ff020000001254a402000000000060672fc290780000040060b680fa0000000000000000000000000000ffffffffffff00000000000000000000ffffac14ffbb"], 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x1030c2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, [], @bt={0xc0000, 0x80000001, 0x80000001, 0x100000001, 0x2, 0x5, 0x1e}}) r1 = semget(0x1, 0x0, 0x0) semctl$GETPID(r1, 0x3, 0xb, &(0x7f0000000040)=""/52) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x2, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000000)=r0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000200)) 00:53:26 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x200100, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000240)="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") syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001240)={0x1, 0x70, 0x7, 0xf2f8, 0x1, 0x0, 0x0, 0x275d, 0x881c, 0x0, 0x8, 0x7, 0x1, 0x31273230, 0x4, 0x49a, 0xfffffffffffffffe, 0x1, 0x7ca, 0x0, 0x4, 0xfa1, 0x100000000, 0xffff, 0x7cc, 0x66a0d647, 0x9, 0x3, 0x96, 0x101, 0x9, 0x8, 0x401, 0xc8, 0xe7, 0x5, 0xc000000, 0x4, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x9}, 0x8000, 0x8, 0xde, 0xf, 0x7, 0x2, 0xaad}, r0, 0xf, r1, 0x800a) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001300)={&(0x7f00000012c0)='./file0\x00', r2}, 0x10) prctl$PR_SET_DUMPABLE(0x4, 0x2) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x202000, 0x0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f00000001c0)={0xed12, 0xec}) 00:53:26 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x36, 0x0, 0x0) 00:53:26 executing program 2: socketpair$unix(0x1, 0x200000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x400002200006008, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKALIGNOFF(r2, 0x1279, &(0x7f0000000000)) [ 735.555114][T20784] 9pnet: Insufficient options for proto=fd [ 735.588237][T20815] 9pnet: Insufficient options for proto=fd 00:53:26 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfTno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x18140, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0x0, {0x0, 0x645}}) 00:53:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f00000000c0)=@ng={0x4, 0xf, "dcf66c9c71ea3127f3c6eabeacdbe69fc7a27e20"}, 0x16, 0x2) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0300000000010600000080000000001c080001003705257c9a9e506f3a2d1817f71ea2d613a8a16e950fdf8ecae13874c10765aafd402a40f0dbe1fe5df706009d24fd83d996fb729a46efd418094e91b7c8baa8ee3870ed8537bb417e68c24b6528d0fff41e43599d758bad8068ce94a71f499e34fd84a4e8fef3817fe4a93b18f6458274df72659386694beefe547db42e00090fb51521b7f69933dbf52fb15ba01b1e0196ce6af5002ec3097e9441df834512bd781c17197c008f47d3300d6fd43023", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x0) fstat(r0, &(0x7f0000000380)) set_robust_list(&(0x7f0000000240)={&(0x7f0000000180)={&(0x7f0000000100)}, 0x197e0000000000, &(0x7f0000000200)={&(0x7f00000001c0)}}, 0x18) [ 735.805468][T20868] XFS (loop5): Invalid superblock magic number [ 735.820678][T20911] 9pnet: Insufficient options for proto=fd 00:53:26 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x37, 0x0, 0x0) [ 735.851789][T20965] 9pnet: Insufficient options for proto=fd [ 736.244603][T21125] XFS (loop5): Invalid superblock magic number 00:53:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:27 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfVno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000700)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x919, 0x400000) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @multicast1}, &(0x7f0000000180)=0xc) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000001c0)={@rand_addr="0b9e9fadc282d71173a4df98ff1ed538", r2}, 0x14) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ptrace$setsig(0x4203, r3, 0x100000003, &(0x7f0000000080)={0x21, 0x8, 0x8}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000740)={{0xa}}) 00:53:27 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x38, 0x0, 0x0) 00:53:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008914, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x56, 0x2, 0x9bed, {0x7, 0x3}, {0x6}, @cond=[{0x45, 0x10000, 0x7, 0x9, 0x5, 0x3}, {0x4800000000000, 0x7fff, 0x3, 0x3, 0xfffffffffffffff9, 0x1000}]}) preadv(r0, &(0x7f0000002a80), 0x10000248, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000100)=0x6, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x113, 0xa}}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) 00:53:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4010ae42, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) syz_open_dev$amidi(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) mount$9p_tcp(&(0x7f00000001c0)='127.0.0.1\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x22480, &(0x7f0000000980)={'trans=tcp,', {'port'}, 0x2c, {[{@uname={'uname', 0x3d, '/proc/capi/capi20\x00'}}, {@afid={'afid', 0x3d, 0xfffffffffffffffc}}, {@debug={'debug', 0x3d, 0xfffffffffffffc00}}, {@afid={'afid'}}, {@cache_mmap='cache=mmap'}, {@fscache='fscache'}, {@uname={'uname', 0x3d, 'cgroup'}}], [{@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@euid_lt={'euid<', r3}}, {@smackfsdef={'smackfsdef'}}, {@dont_appraise='dont_appraise'}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/kvm\x00'}}]}}) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() getpgid(0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x80}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000180)={0x1, 0x10001, 0x8, 0x7b7, 0x100000001, 0x100, 0x33b, 0x3, r7}, &(0x7f0000000280)=0x20) write(r5, &(0x7f0000000400)="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", 0x200) sendfile(r5, r6, 0x0, 0x10000) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000200)={0x7, 0x1}) 00:53:27 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x39, 0x0, 0x0) [ 736.708190][T21148] 9pnet: Insufficient options for proto=fd 00:53:27 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000000c0)=""/246) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x1010}, 0xc) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x16}]}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000280)={0x4, &(0x7f0000000240)=[{0x100000000, 0x7, 0x2, 0xffffffffad39c2a2}, {0x20, 0x4, 0x5, 0x80000001}, {0x1, 0x1ff, 0x4, 0x5}, {0x401, 0x40, 0x4, 0x3b}]}) [ 736.770989][ T26] audit: type=1800 audit(1552697607.891:2471): pid=21152 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17255 res=0 [ 736.775276][T21212] 9pnet: Insufficient options for proto=fd [ 736.822674][ T26] audit: type=1804 audit(1552697607.931:2472): pid=21152 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir302268078/syzkaller.IiZ1Qz/1247/file0" dev="sda1" ino=17255 res=1 00:53:28 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x3, 0x8010000002004084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000040)={0x0, @in, 0x0, 0x3, 0x0, 0x0, 0x40}, 0x98) 00:53:28 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfbno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:28 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x3a, 0x0, 0x0) 00:53:28 executing program 2: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) socket(0x40000000015, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 737.044628][T21296] 9pnet: Insufficient options for proto=fd [ 737.066242][T21347] 9pnet: Insufficient options for proto=fd [ 737.084069][T21227] XFS (loop5): Invalid superblock magic number [ 737.530718][ T26] audit: type=1804 audit(1552697608.651:2473): pid=21258 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir302268078/syzkaller.IiZ1Qz/1247/file0" dev="sda1" ino=17255 res=1 00:53:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x2000, 0x264, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000400)=""/19) r4 = socket$inet(0x2, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, r5, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000440)=0xfbe, 0x4) getsockname(r6, &(0x7f0000000340)=@ipx, &(0x7f00000001c0)=0x80) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1a00001}, 0xc, &(0x7f0000000580)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000540)=0x10000001, 0xffffffffffffff56) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3040000, 0x110, r6, 0x80000000) r7 = dup2(r2, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x100000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000240)) ioctl$ASHMEM_GET_SIZE(r7, 0x7704, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r8, &(0x7f0000000740)={0xc, 0xecc3aadb5d6b339, 0xfa00, {&(0x7f0000000d00)}}, 0x907b3fc4954fa586) r9 = openat$md(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/md0\x00', 0x4001, 0x0) lgetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0) ioctl$BLKPG(r9, 0x40140921, &(0x7f0000000080)={0x4, 0x7, 0x86, &(0x7f0000000280)="d0e423b71a6225486a6af46106eb41da351f6d99d047b8e4b7b635a435c553cbfdf8ac0fcab53e48de15699253eba21f3ccc0076948c01849ff8f2e5e93741cdd7b5a43260f1767efb914415a6f612e590c251d48701fedc872ad4b2661354a2daeec836cb7bd5dfbd2ff61dbcae38ef67d115c316206f5e15e3b9bfb1926b164b10a43a1c4a"}) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-cast6-avx)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7da12a9bf3b3923b121d9c9e2cc98a64d", 0x11) 00:53:28 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x3b, 0x0, 0x0) 00:53:28 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfgno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:28 executing program 3: r0 = memfd_create(&(0x7f00000005c0)='dev F\xa8\r\x01\xbe\xd3\xc1\xe1\xc8_\xe2\xdb\xef\x94\xa6w\xa9\x92H!r\x80\xa4-h\x80C\xcc\x91=\xdb\x11!\x87\xee#5P\x83\xfc\x8a\x1e\xed\x8f=\x1aF\x8b@]\xa4\x95P@4 \xa5h^\x12\xaf\xb7X\xb1\xbf\xcf\x91\xd0\x9b\xfea\xb0#\xe1\xb0O/\x8e#\xa3\x8e\x1e\xf5u\x99}\x87Py\xd8\'U\x00\xcf\x93-\xe2_\xf1\x16\x80\x8e\x00\x97\xe9\xa3\x0f\x89\xff\xecs\xd7X3{\xa4\xec\xfe&\xe0p\x9d\xce\xb3\xbc\x10\n\xf9\x11\xf2\x98&)?~mL\xbb\xb7\xfa\x03\x18\x9e/\xd5\xb9F\x11P\xc1\xf6\xc4k\xe2\xed\xdd/\x84\xce\x816\x16N\xe0R\xfd\xf7\xc5\x91\x96T\x88]i?lp\xf4+\x0e\xef?3\x16\x00V\xb98U\xcb\x84\xbfbs\x0f\xd9\xaf\xe7|\x1b\x8d{\v\x9d\xcc*uf\xf6\x06{\xe1<\x15\xbb\xbcD\x0eyj\xccV\xb2\x04\xc7\xf4\x8f\xcd\xfa.\x84\xe5*\x95', 0x3) fcntl$addseals(r0, 0x409, 0xa) fcntl$addseals(r0, 0x409, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendto$packet(r1, &(0x7f0000000040)="cbb201e096ea8a3e0697226e396b8a50ad45a3d9a98ca0e0e981c949e45d8a37c66d0282e2432688e3026999acd149fcd078f16b8c6b286360dd454041a2e5b0dd220bf6031359009f40f9f442c97026981c85", 0x53, 0x4, &(0x7f0000000200)={0x11, 0x5, r2, 0x1, 0x2, 0x6, @local}, 0x14) [ 737.798993][T21497] 9pnet: Insufficient options for proto=fd 00:53:29 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2ec, 0x0, 0x0) [ 737.875101][T21503] 9pnet: Insufficient options for proto=fd 00:53:29 executing program 3: 00:53:29 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfqno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 738.079134][T21556] XFS (loop5): Invalid superblock magic number 00:53:29 executing program 3: mount$overlay(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='overlay\x00', 0x40000, &(0x7f0000000280)={[{@nfs_export_on='nfs_export=on'}, {@nfs_export_on='nfs_export=on'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcs#\x00'}}, {@pcr={'pcr', 0x3d, 0x8}}, {@seclabel='seclabel'}]}) mknod$loop(&(0x7f0000001000)='./file1\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x400, 0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x3ff, 0x20}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e24, 0x10000, @remote, 0x3ff}}}, &(0x7f0000000180)=0x84) chown(&(0x7f00000001c0)='./file1\x00', 0xee01, 0xffffffffffffffff) 00:53:29 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x300, 0x0, 0x0) [ 738.213199][T21726] 9pnet: Insufficient options for proto=fd 00:53:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000080)={0x2, 0x7f}, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) [ 738.257160][T21729] 9pnet: Insufficient options for proto=fd 00:53:29 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfsno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 738.517736][T21740] 9pnet: Insufficient options for proto=fd [ 738.529592][T21742] 9pnet: Insufficient options for proto=fd [ 738.599565][T21556] XFS (loop5): Invalid superblock magic number 00:53:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:30 executing program 3: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x400020015) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) clone(0x3ffd, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x0, 0xffffffff00000000, 0x9, 0x5, 0x0, 0x3, 0x10000, 0x2, 0x7, 0x2, 0x96e, 0x3, 0xfffffffffffffff8, 0x2, 0x6, 0x3ff, 0x6, 0x41, 0x20, 0xb0, 0xff, 0x0, 0x8, 0x4, 0xffffffffffffffff, 0x9, 0x5c9c2d1f, 0x2, 0xffff, 0x6, 0x800000000000004, 0x1, 0x0, 0x5, 0x503260ab, 0x8, 0x0, 0xffffffffffffffff, 0x4, @perf_bp={0x0, 0x4}, 0x2000, 0x5, 0x0, 0x1, 0x6, 0x80000000, 0x100000000}, r2, 0x6, r1, 0x8) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000440)) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0xffffffffffffffff, 0xedc000000000}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) futex(0x0, 0x1, 0x7, &(0x7f0000edfff0)={0x0, 0x989680}, &(0x7f0000000180)=0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000340)={0x3c, @rand_addr=0xfffffffffffffff9, 0x4e21, 0x0, 'lblc\x00', 0x2, 0x20000000000007, 0x80}, 0x2c) getsockopt$inet_dccp_buf(r0, 0x21, 0xce, &(0x7f0000000080)=""/5, &(0x7f0000000280)=0x5) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) exit(0x0) prlimit64(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000240)) sendmmsg$unix(r0, &(0x7f0000000200), 0x1, 0x4810) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f00000001c0)) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000580)) shutdown(0xffffffffffffffff, 0x0) 00:53:30 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x4ec, 0x0, 0x0) 00:53:30 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/156, 0x9c}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000240)=""/195, 0xc3}, {&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000340)=""/94, 0x5e}], 0x5}, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000c00)=0xe8) 00:53:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x2000, 0x264, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000400)=""/19) r4 = socket$inet(0x2, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, r5, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000440)=0xfbe, 0x4) getsockname(r6, &(0x7f0000000340)=@ipx, &(0x7f00000001c0)=0x80) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1a00001}, 0xc, &(0x7f0000000580)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000540)=0x10000001, 0xffffffffffffff56) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3040000, 0x110, r6, 0x80000000) r7 = dup2(r2, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x100000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000240)) ioctl$ASHMEM_GET_SIZE(r7, 0x7704, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r8, &(0x7f0000000740)={0xc, 0xecc3aadb5d6b339, 0xfa00, {&(0x7f0000000d00)}}, 0x907b3fc4954fa586) r9 = openat$md(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/md0\x00', 0x4001, 0x0) lgetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0) ioctl$BLKPG(r9, 0x40140921, &(0x7f0000000080)={0x4, 0x7, 0x86, &(0x7f0000000280)="d0e423b71a6225486a6af46106eb41da351f6d99d047b8e4b7b635a435c553cbfdf8ac0fcab53e48de15699253eba21f3ccc0076948c01849ff8f2e5e93741cdd7b5a43260f1767efb914415a6f612e590c251d48701fedc872ad4b2661354a2daeec836cb7bd5dfbd2ff61dbcae38ef67d115c316206f5e15e3b9bfb1926b164b10a43a1c4a"}) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-cast6-avx)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7da12a9bf3b3923b121d9c9e2cc98a64d", 0x11) 00:53:30 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfuno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:30 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x500, 0x0, 0x0) [ 739.095128][T21764] 9pnet: Insufficient options for proto=fd [ 739.115900][T21771] 9pnet: Insufficient options for proto=fd 00:53:30 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfwno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:53:30 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x600, 0x0, 0x0) [ 739.341958][T21773] XFS (loop5): Invalid superblock magic number 00:53:30 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r0, 0x65, 0x3, 0x0, &(0x7f0000000080)) modify_ldt$write2(0x11, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0x1000, 0x6, 0x0, 0x8, 0x5, 0x3ff, 0x4, 0x4}, 0x10) [ 739.392995][T21899] 9pnet: Insufficient options for proto=fd [ 739.432669][T21901] 9pnet: Insufficient options for proto=fd 00:53:30 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x700, 0x0, 0x0) 00:53:30 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Ifdno', 0x3d, r1}}) [ 739.684732][T21968] 9pnet: Insufficient options for proto=fd [ 739.713911][T22008] 9pnet: Insufficient options for proto=fd 00:53:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:31 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x900, 0x0, 0x0) 00:53:31 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x11) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) kcmp(r1, r2, 0x5, r0, r0) r4 = socket$netlink(0x10, 0x3, 0x15) write$P9_RGETLOCK(r3, &(0x7f00000001c0)={0x1e, 0x37, 0x1, {0x0, 0x9, 0x49b7, r1}}, 0x1e) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000240)="39000000130009006900000000000000ab008048100000004600010700000014190001c010000000000003f5000000000000ef38bf461e59d7", 0x39}], 0x1) 00:53:31 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/156, 0x9c}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000240)=""/195, 0xc3}, {&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000340)=""/94, 0x5e}], 0x5}, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000c00)=0xe8) 00:53:31 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Qfdno', 0x3d, r1}}) 00:53:31 executing program 3: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x400020015) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) clone(0x3ffd, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x0, 0xffffffff00000000, 0x9, 0x5, 0x0, 0x3, 0x10000, 0x2, 0x7, 0x2, 0x96e, 0x3, 0xfffffffffffffff8, 0x2, 0x6, 0x3ff, 0x6, 0x41, 0x20, 0xb0, 0xff, 0x0, 0x8, 0x4, 0xffffffffffffffff, 0x9, 0x5c9c2d1f, 0x2, 0xffff, 0x6, 0x800000000000004, 0x1, 0x0, 0x5, 0x503260ab, 0x8, 0x0, 0xffffffffffffffff, 0x4, @perf_bp={0x0, 0x4}, 0x2000, 0x5, 0x0, 0x1, 0x6, 0x80000000, 0x100000000}, r2, 0x6, r1, 0x8) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000440)) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0xffffffffffffffff, 0xedc000000000}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) futex(0x0, 0x1, 0x7, &(0x7f0000edfff0)={0x0, 0x989680}, &(0x7f0000000180)=0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000340)={0x3c, @rand_addr=0xfffffffffffffff9, 0x4e21, 0x0, 'lblc\x00', 0x2, 0x20000000000007, 0x80}, 0x2c) getsockopt$inet_dccp_buf(r0, 0x21, 0xce, &(0x7f0000000080)=""/5, &(0x7f0000000280)=0x5) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) exit(0x0) prlimit64(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000240)) sendmmsg$unix(r0, &(0x7f0000000200), 0x1, 0x4810) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f00000001c0)) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000580)) shutdown(0xffffffffffffffff, 0x0) 00:53:31 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xa00, 0x0, 0x0) 00:53:31 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x900, 0x0, 0x0) 00:53:31 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xb00, 0x0, 0x0) [ 740.369660][T22158] XFS (loop5): Invalid superblock magic number [ 740.394943][T22249] 9pnet: Insufficient options for proto=fd 00:53:31 executing program 4: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) ioprio_get$pid(0x0, r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000040)={0xce47fc8, 0x4, 0x1000, 0x2, [], [], [], 0x9, 0xffffffff, 0x4, 0x1, "0e18cc49136d989bb8011765b0d80727"}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000180)=0x3, 0x4) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f00000001c0)={0x80000000, "e1d456e8b4d79fbd22829b277d4f2522c9fc14dc628c99a7020ed6986b8e9735", 0x3, 0x2a, 0x3f, 0x2, 0x2, 0x0, 0xac, 0x3ff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x100f3f75}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000300)={r2, 0x7ff}, 0x8) epoll_create(0x9) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e22, 0x9, @ipv4={[], [], @loopback}, 0x2}}}, 0x84) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r3, 0x200, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x2, 0x0, 0x8, 0xffffffff}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000540)={0x5, 0x3, 0x80000001, 0xfffffffffffffffe, 0x80000001}) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000580)=0x7fffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={0x0, r1, 0x3, 0x1}, 0x14) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000600)=0x5, 0x4) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40004000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x100000001, @bearer=@l2={'ib', 0x3a, 'batadv0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x2000c080) syz_open_dev$sg(&(0x7f0000000740)='/dev/sg#\x00', 0x4814, 0x32002) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000007c0)={0xffffffffffffffff}, 0x0, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000840)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000780), r4, 0x0, 0x1, 0x4}}, 0x20) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000880)='/dev/urandom\x00', 0x10000, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f00000008c0)={0x6, 0x0, 0x270d, 0x300}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000900)=0x0) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000940)=""/135, &(0x7f0000000a00)=0x87) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000a40)={0x28, 0x3, 0x0, {0x2, 0x7, 0x0, 'ppp1loe'}}, 0x28) r7 = accept4$ax25(r1, 0x0, &(0x7f0000000a80), 0x80000) rt_sigqueueinfo(r6, 0x39, &(0x7f0000000ac0)={0xd, 0x4, 0x4}) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000b40)={r7, 0x3, 0x39ed4e80, "a80c61919158ecfabf79e8dee5e41cf386e088a2aed91c6410477ab7392ad0d59813df1e3e08ae6085cc69485cd85b90969d16f35dcfb06a8aa43d2f93757d684937781851d05e833fd24a08a1befb3d24e7f5f284d3bb23b4e067dfe5143e5703af5756791494c4ca55a3b0ee09e074d5c4772445826c572ca464b3c83508afa35f0b643e37b66937eb915f4db23400a05d13ffd438ee6263582e970666a1ef6b36aaf4a463ecfa19540c4f2f2bec7f2d26e0672064816e18e30a6e63e46ef99962cf950f469262cac5ebb5113a4318481c8796500a47f35e0351937a21131b1c4d9f3da1a99e5346a9e5353d93a3e0eff0dc7aeb63"}) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000c40)={0x9, 0x9, 0x6, 0x7fff, 0x100000001}) [ 740.422999][T22255] 9pnet: Insufficient options for proto=fd 00:53:31 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Rfdno', 0x3d, r1}}) 00:53:31 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xc00, 0x0, 0x0) [ 740.684299][T22324] 9pnet: Insufficient options for proto=fd [ 740.717194][T22368] 9pnet: Insufficient options for proto=fd 00:53:32 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xd00, 0x0, 0x0) 00:53:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000180)=0x4) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000e00000/0x200000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000e00000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000480)="1a4661d38680b07052ffecc06700d76e8b95b612c59b1f04b0a36febc24b8d746e562779f8e4cfb83e76ea96b6844e80184c0dbe6913aefb650b95d949c0036c8070076815b3afa2099e039f581ca80202e632a95b5d0da2e6adefdd187c4828d12054f4a3131a245978368e44580ba2d28acdbb4b88a311c09e5dfe0fd21de9274cedfb4e7edc4f8bf10ad2a905b477441456e3ca33f2e420a83969a4daf4c420b10e4f74761a5f58dff2c7b7e47ea4aeeb9b08df31db86da8bc742399290226d699276b0eab6c0a9297917ed55", 0xfffffffffffffee4, r0}, 0x55) close(r0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000001c0)={{0x83, 0x2, 0xfff, 0x3, 0x8}, 0x9}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x408000, 0x0) ioctl$TIOCCONS(r1, 0x541d) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000200)) getdents(0xffffffffffffffff, 0x0, 0x0) 00:53:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 741.235279][T22450] XFS (loop5): Invalid superblock magic number 00:53:32 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/156, 0x9c}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000240)=""/195, 0xc3}, {&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000340)=""/94, 0x5e}], 0x5}, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000c00)=0xe8) 00:53:32 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Sfdno', 0x3d, r1}}) 00:53:32 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xe00, 0x0, 0x0) 00:53:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000040)={{0x100000000, 0x8}, 'port1\x00', 0xa, 0x2, 0x0, 0x80000000, 0xc800000000000, 0xa96, 0x433, 0x0, 0x4, 0x1}) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0x40045564, &(0x7f00000005c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @rumble}, {0x0, 0x0, 0x0, {}, {}, @cond}}) 00:53:32 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xf00, 0x0, 0x0) 00:53:32 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept(r0, &(0x7f0000000000)=@in, &(0x7f0000000080)=0x80) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x4004}], 0x1, 0x0) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000500)=""/84, 0xf}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2, &(0x7f00000000c0)=""/50, 0x32}, 0x0) [ 741.560255][T22512] 9pnet: Insufficient options for proto=fd [ 741.585871][T22594] 9pnet: Insufficient options for proto=fd 00:53:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_snmp6\x00') setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x15, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getqdisc={0x24, 0x26, 0x30b}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000009e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000d80)=""/69, 0x45}, {&(0x7f0000000e00)=""/242, 0xf2}, {&(0x7f0000000f00)=""/37, 0x25}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/95, 0x5f}, {&(0x7f0000001fc0)=""/216, 0xd8}, {&(0x7f00000020c0)=""/88, 0x58}, {&(0x7f0000002240)=""/56, 0x38}], 0x8}}], 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@getqdisc={0x24, 0x26, 0x317}, 0x24}}, 0x0) 00:53:32 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Tfdno', 0x3d, r1}}) 00:53:32 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xfbe, 0x0, 0x0) 00:53:32 executing program 3: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)=0x3, 0xfffffffffffffda7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) 00:53:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 741.888161][T22631] 9pnet: Insufficient options for proto=fd [ 741.960110][T22713] 9pnet: Insufficient options for proto=fd [ 742.164012][T22742] XFS (loop5): Invalid superblock magic number 00:53:33 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/156, 0x9c}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000240)=""/195, 0xc3}, {&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000340)=""/94, 0x5e}], 0x5}, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000c00)=0xe8) 00:53:33 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Vfdno', 0x3d, r1}}) 00:53:33 executing program 4: rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='wchan\x00') openat$cgroup_int(r0, &(0x7f0000000000)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) ftruncate(r0, 0x100000000) 00:53:33 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1100, 0x0, 0x0) 00:53:33 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40410000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x9, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x2, 0xfd0, 0x8c, 0xfffffffffffffffb]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x24008080) syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "a00c50", 0x30, 0x3c, 0x0, @ipv4={[], [], @local}, @local, {[], @icmpv6=@param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "0cf805", 0x0, 0x0, 0x0, @ipv4={[], [], @dev}, @mcast2}}}}}}}, 0x0) 00:53:33 executing program 3: socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) capset(&(0x7f0000000080)={0x19980330, r2}, &(0x7f00000000c0)={0x8, 0x0, 0xb0, 0xb613, 0x6, 0x2}) getpid() getpgid(0xffffffffffffffff) gettid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) r4 = getpgid(r3) ioprio_set$pid(0x0, r4, 0x3) keyctl$read(0x11, 0xfffffffffffffffd, &(0x7f0000000000)=""/4, 0x4) [ 742.699650][T22803] 9pnet: Insufficient options for proto=fd 00:53:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={r2, r3/1000+30000}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x10007, 0x3, 0xd000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) getpeername$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10810000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xf00, 0x70bd26, 0x25dfdbfc, {0x0, r4, {0xffff, 0xfff3}, {0xfff7, 0xffff}, {0x0, 0xe5274049c6ae0a9b}}, [@TCA_RATE={0x8, 0x5, {0x4, 0x180}}, @TCA_CHAIN={0x8}]}, 0x34}}, 0x40) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '::\n'}, 0x1e6) 00:53:33 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1200, 0x0, 0x0) [ 742.783704][T22878] 9pnet: Insufficient options for proto=fd 00:53:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:34 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'bfdno', 0x3d, r1}}) 00:53:34 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1300, 0x0, 0x0) 00:53:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000280)={0x5775}) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff00000008000000070800000001003339bd820500ac14141b080003000100000f01"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b6fc66303f00000025"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 743.063721][T23047] 9pnet: Insufficient options for proto=fd [ 743.117593][T23097] 9pnet: Insufficient options for proto=fd [ 743.265100][T23080] XFS (loop5): Invalid superblock magic number 00:53:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/156, 0x9c}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000240)=""/195, 0xc3}, {&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000340)=""/94, 0x5e}], 0x5}, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001540)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/140, 0x8c}, {0x0}], 0x3, &(0x7f0000001580)=""/125, 0x7d}, 0x20) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000001640)={0x0, 0x0, 0x10, 0x0, 0x8}, &(0x7f0000001680)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000013c0)={0x0, r0, 0x0, 0x3d, &(0x7f0000000100)='.cgroupppp1wlan0\'proc(cpuset/vboxnet1self*cgroupppp1vboxnet0\x00'}, 0x30) sched_setattr(r2, &(0x7f0000001400)={0x30, 0x0, 0x1, 0x70f1, 0x3ff, 0x1, 0x2, 0x2fce}, 0x0) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0x3f, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x101200, 0x0) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) r4 = dup2(r1, r1) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, 0x0) getdents(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x2b, &(0x7f0000001740)="e80a45a59e0e998ab0b439d264ceacc7efc7c1395670155dd16ca0c78371804080cf766c3036c28dbf445c354de19e7dcc565ae4f12c3f5f5bb6782c8d249847cdbd3121e08ccbfdbd5485f6c5813ae01426aebadaff740712951efc9ee82fdb39b829e65d4eac8aeeb1d8be1cc51134bc1957576f06ae24d02a3ba1251e1825", 0x80) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000040)=r2) socket$xdp(0x2c, 0x3, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000280)) 00:53:34 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1400, 0x0, 0x0) 00:53:34 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'dfdno', 0x3d, r1}}) 00:53:34 executing program 3: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000040)) ioctl$UI_DEV_CREATE(r1, 0x5501) socket$alg(0x26, 0x5, 0x0) readv(r0, &(0x7f00000022c0)=[{&(0x7f0000002240)=""/56, 0x38}], 0x1000039e) ioctl$SIOCNRDECOBS(r1, 0x89e2) [ 743.832413][T23223] 9pnet: Insufficient options for proto=fd [ 743.856707][T23225] 9pnet: Insufficient options for proto=fd 00:53:35 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1500, 0x0, 0x0) 00:53:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x92081, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xffffffffffffffff, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0x284ea92c5e2cf055) 00:53:35 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'gfdno', 0x3d, r1}}) 00:53:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:35 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1600, 0x0, 0x0) 00:53:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) mremap(&(0x7f00007c0000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000054000/0x2000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r3, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='trusted.overlay.redirect\x00', &(0x7f0000000440)='./file0\x00', 0x8, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) rt_sigsuspend(&(0x7f0000000080)={0x5}, 0x88) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x42a500, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r7 = geteuid() write$P9_RSTATu(r4, &(0x7f0000000340)={0x7e, 0x7d, 0x1, {{0x0, 0x57, 0x1, 0x7fff, {0x40, 0x3, 0x6}, 0x23000000, 0x6, 0x800, 0x0, 0xa, '/dev/vbi#\x00', 0x7, 'md5sum}', 0xa, '[loselinux', 0x9, '/dev/kvm\x00'}, 0x12, 'user.\x1b^.selfsystem', r5, r6, r7}}, 0x7e) r8 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$EVIOCSABS20(r8, 0x401845e0, &(0x7f0000000100)={0x8001, 0x7c9, 0x8, 0xbe, 0x6d, 0xa355}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020000006766c744240600000200670f011c240f20c066352003000a0f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, 0x0, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000000580)={0x0, @pix={0xfffffffffffffffb, 0x81, 0xb5315241, 0x5, 0x7, 0xdf, 0xf, 0xd1d, 0x0, 0x6, 0x0, 0x6}}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000040)=0x9, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') ioctl$DRM_IOCTL_ADD_CTX(r8, 0xc0086420, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r9, 0x40086424, &(0x7f00000004c0)={r10, 0x3}) [ 744.115632][T23301] 9pnet: Insufficient options for proto=fd [ 744.183701][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 744.189581][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 744.194050][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 744.202071][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 744.203188][T23353] 9pnet: Insufficient options for proto=fd [ 744.209315][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 744.219976][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 744.226857][ C0] protocol 88fb is buggy, dev hsr_slave_0 00:53:35 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1700, 0x0, 0x0) [ 744.233745][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 744.342652][T23349] XFS (loop5): Invalid superblock magic number 00:53:36 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/156, 0x9c}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000240)=""/195, 0xc3}, {&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000340)=""/94, 0x5e}], 0x5}, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:36 executing program 4: ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000d40)={0x114000, 0x100000, 0x101, 0x10000, 0x2}) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001080)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x800000000000000, 0x2, 0x1, 0xfffffffffffffffd}, 0x20) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000080)={0x5, 0x1ff, 0x1f, 0x1, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18') sendfile(r1, r3, &(0x7f00000000c0)=0x209, 0x5a) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x60240, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000001c0)={{0x2, 0x3, 0xdab, 0x3, 0x8}}) r5 = add_key(&(0x7f0000000e80)='cifs.spnego\x00', &(0x7f0000000ec0)={'syz', 0x0}, &(0x7f0000000f00)="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", 0xff, 0xfffffffffffffff9) request_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000e00)={'syz', 0x3}, &(0x7f0000000e40)='minix\x00', r5) r6 = syz_open_dev$sg(&(0x7f0000000dc0)='/dev/sg#\x00', 0x81, 0x400000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000001000)={{0x3, 0x3, 0x4a, 0x1, 0xffff}, 0x7, 0xfffffffffffffffc}) pwrite64(r6, &(0x7f00000000c0)="6239509cdd041cd5d08e453133600015b9aef4a1bdc9a5165f7f8a2c6dea5eabc4269aca1d462c7779d8edb438bdec38d2a48a006afa5713b553317b59b8ba7499b6e736e66f320e1522043f155df649f15edb6848b44278449a57ba58a47a3510bc419d5b779b2a", 0x68, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000cc0)=0x10d004) write$binfmt_elf32(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xa60) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000c80)=0x7, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x8) ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000d80)) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r8, 0x0) 00:53:36 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1800, 0x0, 0x0) 00:53:36 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'qfdno', 0x3d, r1}}) 00:53:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:36 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = getpgrp(0xffffffffffffffff) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x3, r1}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x181080, 0x0) setsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000140), 0x4) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x7, 0x302) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000100)={0x0, 0x6d, 0x2, [], &(0x7f00000000c0)=0x2}) 00:53:36 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000340)={{0x8, 0xffffffffffffffa5, 0x9, 0x6}, 'syz0\x00', 0xa}) mkdirat(r0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = getuid() r3 = geteuid() syz_mount_image$gfs2(&(0x7f0000000200)='gfs2\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, 0x1, &(0x7f0000000440)=[{&(0x7f0000000500)="9aa4b1af26534bbb03c1d30a28dd60b57b432dfb7bdd0d6446ffd48e46b9474b5fa08d66f0a5f3ee75d9f9a6b64b936a2207276aab96470019fc9ef3c93671a056cbae382ef16799bed038f81d9316daaf60c48f9b52f3d2889a92448076c9bbc2531a72f67f2d2828463c94848feb4dd5eedf648f804f755660b0429de819eb2e182c6c668800db40036db6decb70be1e0b5714799103da533dba325dd718c5687ce2210e5d124897ebbe11dc9a2f8c773467f8b21baed20f9a00c8bf74284a3ae2e0c29235608d3813", 0xca, 0x8001}], 0x400, &(0x7f0000000600)={[{@hostdata={'hostdata'}}, {@localflocks='localflocks'}, {@quota_off='quota=off'}, {@locktable={'locktable'}}, {@barrier='barrier'}], [{@smackfsroot={'smackfsroot', 0x3d, 'syz0\x00'}}, {@euid_lt={'euid<', r2}}, {@appraise='appraise'}, {@seclabel='seclabel'}, {@uid_eq={'uid', 0x3d, r3}}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = open(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) rmdir(&(0x7f0000000740)='./file0\x00') renameat(r0, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') [ 745.394468][T23482] 9pnet: Insufficient options for proto=fd 00:53:36 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1900, 0x0, 0x0) [ 745.444032][T23495] 9pnet: Insufficient options for proto=fd 00:53:36 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'sfdno', 0x3d, r1}}) [ 745.545104][T23487] XFS (loop5): Invalid superblock magic number 00:53:36 executing program 4: ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000d40)={0x114000, 0x100000, 0x101, 0x10000, 0x2}) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001080)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x800000000000000, 0x2, 0x1, 0xfffffffffffffffd}, 0x20) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000080)={0x5, 0x1ff, 0x1f, 0x1, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18') sendfile(r1, r3, &(0x7f00000000c0)=0x209, 0x5a) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x60240, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000001c0)={{0x2, 0x3, 0xdab, 0x3, 0x8}}) r5 = add_key(&(0x7f0000000e80)='cifs.spnego\x00', &(0x7f0000000ec0)={'syz', 0x0}, &(0x7f0000000f00)="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", 0xff, 0xfffffffffffffff9) request_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000e00)={'syz', 0x3}, &(0x7f0000000e40)='minix\x00', r5) r6 = syz_open_dev$sg(&(0x7f0000000dc0)='/dev/sg#\x00', 0x81, 0x400000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000001000)={{0x3, 0x3, 0x4a, 0x1, 0xffff}, 0x7, 0xfffffffffffffffc}) pwrite64(r6, &(0x7f00000000c0)="6239509cdd041cd5d08e453133600015b9aef4a1bdc9a5165f7f8a2c6dea5eabc4269aca1d462c7779d8edb438bdec38d2a48a006afa5713b553317b59b8ba7499b6e736e66f320e1522043f155df649f15edb6848b44278449a57ba58a47a3510bc419d5b779b2a", 0x68, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000cc0)=0x10d004) write$binfmt_elf32(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xa60) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000c80)=0x7, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x8) ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000d80)) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r8, 0x0) 00:53:36 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1a00, 0x0, 0x0) [ 745.734936][T23614] 9pnet: Insufficient options for proto=fd [ 745.816554][T23617] 9pnet: Insufficient options for proto=fd 00:53:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x2) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) [ 746.164065][T23632] xt_nfacct: accounting object `syz1' does not exists 00:53:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/156, 0x9c}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000240)=""/195, 0xc3}, {&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000340)=""/94, 0x5e}], 0x5}, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:37 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'ufdno', 0x3d, r1}}) 00:53:37 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1b00, 0x0, 0x0) 00:53:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x2) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) 00:53:37 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80100) recvfrom$netrom(r0, &(0x7f00000000c0)=""/70, 0x46, 0x2000, &(0x7f00000001c0)={{0x3, @default, 0x2}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x3) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r2, 0x121, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffffff2d}]}]}, 0x20}}, 0x4000000) 00:53:37 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1c00, 0x0, 0x0) 00:53:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x2) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) [ 746.641105][T23843] xt_nfacct: accounting object `syz1' does not exists [ 746.662393][T23850] 9pnet: Insufficient options for proto=fd [ 746.729127][T23863] 9pnet: Insufficient options for proto=fd [ 746.753370][T23849] XFS (loop5): Invalid superblock magic number 00:53:37 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'w.dno', 0x3d, r1}}) [ 746.793625][T23869] xt_nfacct: accounting object `syz1' does not exists 00:53:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x2) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) 00:53:38 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1d00, 0x0, 0x0) [ 746.985233][T23979] xt_nfacct: accounting object `syz1' does not exists 00:53:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) [ 747.044602][T23981] 9pnet: Insufficient options for proto=fd [ 747.131092][T23985] 9pnet: Insufficient options for proto=fd [ 747.200208][T23988] xt_nfacct: accounting object `syz1' does not exists 00:53:38 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1e00, 0x0, 0x0) 00:53:38 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000003440)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="10000000000000000004000001000000"], 0x10}}], 0x1, 0x0) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000380)}}, {{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000480), 0x1400}}], 0x2, 0x0) 00:53:38 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'w/dno', 0x3d, r1}}) 00:53:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) 00:53:38 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/156, 0x9c}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000240)=""/195, 0xc3}, {&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000340)=""/94, 0x5e}], 0x5}, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:38 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1f00, 0x0, 0x0) [ 747.536328][T24000] 9pnet: Insufficient options for proto=fd [ 747.567211][T24007] xt_nfacct: accounting object `syz1' does not exists 00:53:38 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x802, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000200)=0x8) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\x13)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000100)) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x204000, 0x0) getsockname$netrom(r3, &(0x7f0000000240)={{0x3, @null}, [@bcast, @null, @netrom, @remote, @netrom, @rose, @rose, @bcast]}, &(0x7f00000001c0)=0x48) [ 747.589839][T24018] 9pnet: Insufficient options for proto=fd 00:53:38 executing program 4: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) 00:53:38 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfIno', 0x3d, r1}}) 00:53:38 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2000, 0x0, 0x0) 00:53:38 executing program 4: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) [ 747.726080][T24003] XFS (loop5): Invalid superblock magic number 00:53:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) listen(r2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000440)=0x1ff, 0x4) socket$inet6(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x0}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x0, 0x100, 0x400}, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000788000), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$rose(r3, &(0x7f0000001040)=""/4096, 0x1000, 0x12122, 0x0, 0x0) r4 = mq_open(&(0x7f0000000040)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@dev, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x4e23, 0xaf58, 0x0, 0x0, 0x0, 0x33, 0x0, r5}, {0x0, 0xd5, 0x0, 0x0, 0x0, 0x240000000000}, {0x0, 0x1}, 0xec2a}, {{@in=@broadcast, 0x4d3, 0xff}, 0xa, @in, 0x3506, 0x3, 0x0, 0x8000}}, 0xe8) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(0xffffffffffffffff, &(0x7f0000307ffd), 0x0, 0x0, 0x0) close(r4) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0xffffd}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 00:53:39 executing program 4: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) [ 747.857638][T24040] 9pnet: Insufficient options for proto=fd [ 747.889101][T24044] 9pnet: Insufficient options for proto=fd 00:53:39 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2100, 0x0, 0x0) 00:53:39 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfQno', 0x3d, r1}}) [ 748.118359][T24054] 9pnet: Insufficient options for proto=fd [ 748.182598][T24063] 9pnet: Insufficient options for proto=fd 00:53:39 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) 00:53:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:39 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2200, 0x0, 0x0) 00:53:39 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfRno', 0x3d, r1}}) 00:53:39 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/156, 0x9c}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000240)=""/195, 0xc3}, {&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000340)=""/94, 0x5e}], 0x5}, 0x1) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) listen(r2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000440)=0x1ff, 0x4) socket$inet6(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x0}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x0, 0x100, 0x400}, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000788000), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$rose(r3, &(0x7f0000001040)=""/4096, 0x1000, 0x12122, 0x0, 0x0) r4 = mq_open(&(0x7f0000000040)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@dev, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x4e23, 0xaf58, 0x0, 0x0, 0x0, 0x33, 0x0, r5}, {0x0, 0xd5, 0x0, 0x0, 0x0, 0x240000000000}, {0x0, 0x1}, 0xec2a}, {{@in=@broadcast, 0x4d3, 0xff}, 0xa, @in, 0x3506, 0x3, 0x0, 0x8000}}, 0xe8) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(0xffffffffffffffff, &(0x7f0000307ffd), 0x0, 0x0, 0x0) close(r4) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0xffffd}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 00:53:39 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) [ 748.616305][T24178] 9pnet: Insufficient options for proto=fd 00:53:39 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2300, 0x0, 0x0) 00:53:39 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) [ 748.672337][T24185] 9pnet: Insufficient options for proto=fd 00:53:39 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/156, 0x9c}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000240)=""/195, 0xc3}, {&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000340)=""/94, 0x5e}], 0x5}, 0x1) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:39 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfSno', 0x3d, r1}}) [ 748.824691][T24183] XFS (loop5): Invalid superblock magic number 00:53:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, 0x0, 0x248) 00:53:40 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2400, 0x0, 0x0) [ 748.868515][T24205] 9pnet: Insufficient options for proto=fd [ 748.914707][T24207] 9pnet: Insufficient options for proto=fd 00:53:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:40 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r1 = openat$vfio(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20ncci\x00', 0x40, 0x0) r2 = request_key(&(0x7f0000000240)='cifs.idmap\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='/proc/capi/capi20ncci\x00', 0xfffffffffffffffc) keyctl$clear(0x7, r2) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="0e218098fb1bdda6e4dabcbfb92f4a3a0152ec78bbbd740104ac407e2a789d6e13f0085a36b2aed01c449cfb8d2dd81e90d6419af80e55134844f831d913d44b2716d24affeaa1c953d7c90fded11e129be6737c9ed20045eaa7271d2c6e83c5e855f40183a74ebd647ee29488fc1789df0556", 0x73, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', &(0x7f0000000180)) pipe2(&(0x7f0000000200), 0x80800) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f00000001c0)=""/62) 00:53:40 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2500, 0x0, 0x0) 00:53:40 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/156, 0x9c}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000240)=""/195, 0xc3}, {&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000340)=""/94, 0x5e}], 0x5}, 0x1) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, 0x0, 0x248) 00:53:40 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfTno', 0x3d, r1}}) 00:53:40 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) statfs(0x0, 0x0) pipe2(0x0, 0x0) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000280)={0x8000, 0x401, 0x9dac, 0x8, 0x18, 0x9}) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) syz_mount_image$ntfs(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 749.714151][T24235] 9pnet: Insufficient options for proto=fd 00:53:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, 0x0, 0x248) 00:53:40 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2600, 0x0, 0x0) [ 749.763270][T24247] 9pnet: Insufficient options for proto=fd 00:53:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:41 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfVno', 0x3d, r1}}) 00:53:41 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x9, 0x7, 0xb000}, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r0, 0x0, 0xf, &(0x7f0000000080)='/dev/dlm_plock\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0x10) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000300)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r0, 0x0, 0x1, &(0x7f0000000100)='\x00', r2}, 0x30) preadv(r0, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/169, 0xfffffe74}], 0x1, 0x0) [ 749.857740][T24257] PKCS8: Unsupported PKCS#8 version [ 749.877248][T24241] XFS (loop5): Invalid superblock magic number [ 749.967803][T24266] 9pnet: Insufficient options for proto=fd [ 750.012537][T24288] 9pnet: Insufficient options for proto=fd 00:53:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, 0x0}, 0x248) 00:53:41 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2700, 0x0, 0x0) 00:53:41 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfbno', 0x3d, r1}}) 00:53:41 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x100002) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x8, 0x4}) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000040), &(0x7f00000000c0)) 00:53:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, 0x0}, 0x248) [ 750.665953][T24385] 9pnet: Insufficient options for proto=fd [ 750.682624][T24388] 9pnet: Insufficient options for proto=fd 00:53:41 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2800, 0x0, 0x0) 00:53:41 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfgno', 0x3d, r1}}) 00:53:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) [ 750.848145][T24392] XFS (loop5): Invalid superblock magic number 00:53:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, 0x0}, 0x248) 00:53:42 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2900, 0x0, 0x0) [ 750.893035][T24507] 9pnet: Insufficient options for proto=fd [ 750.914757][T24511] 9pnet: Insufficient options for proto=fd 00:53:42 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfqno', 0x3d, r1}}) [ 751.112678][T24520] 9pnet: Insufficient options for proto=fd [ 751.121703][T24521] 9pnet: Insufficient options for proto=fd [ 751.293396][T24524] XFS (loop5): Invalid superblock magic number 00:53:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:42 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2a00, 0x0, 0x0) 00:53:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1}]}, 0x248) 00:53:42 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfsno', 0x3d, r1}}) [ 751.732526][T24540] 9pnet: Insufficient options for proto=fd 00:53:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1}]}, 0x248) [ 751.823887][T24552] 9pnet: Insufficient options for proto=fd 00:53:43 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2b00, 0x0, 0x0) 00:53:43 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfuno', 0x3d, r1}}) [ 751.932794][T24547] XFS (loop5): Invalid superblock magic number 00:53:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1}]}, 0x248) [ 752.036665][T24567] 9pnet: Insufficient options for proto=fd 00:53:43 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2c00, 0x0, 0x0) [ 752.110609][T24570] 9pnet: Insufficient options for proto=fd 00:53:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:43 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfwno', 0x3d, r1}}) 00:53:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) 00:53:43 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:43 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2d00, 0x0, 0x0) 00:53:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) [ 752.686055][T24691] 9pnet: Insufficient options for proto=fd [ 752.710646][T24698] 9pnet: Insufficient options for proto=fd 00:53:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) 00:53:43 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2e00, 0x0, 0x0) 00:53:43 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x2}}) [ 752.884625][T24702] XFS (loop5): Invalid superblock magic number 00:53:44 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x9}}) 00:53:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) 00:53:44 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:44 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x10}}) 00:53:44 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2f00, 0x0, 0x0) 00:53:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x90, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x108) 00:53:44 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:44 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x3000, 0x0, 0x0) 00:53:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x90, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x108) 00:53:44 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x900}}) 00:53:45 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x3100, 0x0, 0x0) [ 753.824430][T24855] XFS (loop5): Invalid superblock magic number 00:53:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x90, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x108) 00:53:45 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x1020}}) 00:53:45 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x3200, 0x0, 0x0) 00:53:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x0, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) 00:53:45 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:45 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x2000}}) 00:53:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x0, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) 00:53:45 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x3300, 0x0, 0x0) 00:53:45 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x2010}}) 00:53:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:45 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x0, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [0x0, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) 00:53:45 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x3400, 0x0, 0x0) 00:53:45 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x3f00}}) [ 754.755119][T25023] XFS (loop5): Invalid superblock magic number 00:53:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) 00:53:45 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x3500, 0x0, 0x0) 00:53:46 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xedc0}}) [ 754.880211][T25045] xt_nfacct: accounting object `syz1' does not exists [ 755.277260][T25058] XFS (loop5): Invalid superblock magic number 00:53:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:46 executing program 3: socketpair(0x9, 0x4, 0x3ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e21, 0x8, @mcast2, 0xfffffffffffffffe}}, 0x0, 0x7, 0x0, "b89b3f3ccdda382ae5dec9598129a994ef7cd91becd5825ecaf2ad884767af886377a3653290500c2d4153bfc6eb4d9a502dbea04c42be67055c043dbfb7bd129189f0352fc840b966687d81ae748073"}, 0xd8) 00:53:46 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:46 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x3600, 0x0, 0x0) 00:53:46 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x8000a0}}) 00:53:46 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x3700, 0x0, 0x0) 00:53:46 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f66696c65302023308cb63a5fe83db9f339bcbad1d216d60163e3209afecff01c57ea29e3a4b86ebd87c2f2f0e23eed15b61b5dbc2fb5fa1ef11b5fb59b4202422b38cad30919e36a46cfae515bba7bd6df2c7e2359b3e241d68c"], 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) connect$x25(r0, &(0x7f0000000080)={0x9, @null=' \x00'}, 0x12) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 00:53:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:46 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xfeffff}}) 00:53:47 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x3800, 0x0, 0x0) 00:53:47 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x1000000}}) [ 755.968228][T25084] XFS (loop5): Invalid superblock magic number [ 756.415332][T25223] XFS (loop5): Invalid superblock magic number 00:53:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:47 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:47 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x3900, 0x0, 0x0) 00:53:47 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x404882, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000001) 00:53:47 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x2000000}}) 00:53:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:48 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x3a00, 0x0, 0x0) 00:53:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x138, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1b0) 00:53:48 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x9000000}}) 00:53:48 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x3b00, 0x0, 0x0) 00:53:48 executing program 3: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) tgkill(0x0, 0x0, 0x0) clock_getres(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, &(0x7f0000040000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)={0x1}) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000000)=0x3) ioctl$FICLONE(r1, 0x40049409, r1) unshare(0x400) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) fcntl$lock(r2, 0x7, &(0x7f00000001c0)) tkill(0x0, 0x1000000000016) dup3(r1, r2, 0x0) 00:53:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x138, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1b0) [ 757.048298][T25288] XFS (loop5): Invalid superblock magic number 00:53:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:48 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x10000000}}) 00:53:48 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x3f00, 0x0, 0x0) 00:53:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x138, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa8}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1b0) 00:53:48 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x14}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x22e, 0x0) 00:53:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:49 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x4000, 0x0, 0x0) 00:53:49 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x20000000}}) 00:53:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) [ 758.004938][T25507] XFS (loop5): Invalid superblock magic number 00:53:49 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20000, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local={0xfe, 0x80, [0x0, 0x0, 0x8847, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88]}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 00:53:49 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xbe0f, 0x0, 0x0) [ 758.543933][T25742] XFS (loop5): Invalid superblock magic number 00:53:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:50 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x20100000}}) 00:53:50 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:50 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xec02, 0x0, 0x0) 00:53:50 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x200040, 0x9) r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video1\x00', 0x2, 0x0) r3 = epoll_create(0x80000000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) r5 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000580)='/dev/capi20\x00', 0x4a0100, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x111002, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000003800)=[{{&(0x7f0000000680)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000900)=""/199, 0xc7}, {&(0x7f0000000700)=""/10, 0xa}], 0x2, &(0x7f0000000a00)=""/98, 0x62}, 0x3}, {{&(0x7f0000000ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000780)=""/6, 0x6}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)=""/78, 0x4e}, {&(0x7f0000000c00)=""/106, 0x6a}, {&(0x7f0000000c80)=""/135, 0x87}, {&(0x7f0000000dc0)=""/108, 0x6c}, {&(0x7f0000000d40)=""/58, 0x3a}, {&(0x7f0000000e40)=""/243, 0xf3}, {&(0x7f0000000f40)=""/21, 0x15}, {&(0x7f0000000f80)=""/179, 0xb3}], 0xa, &(0x7f0000001600)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000001100)=@ax25={{0x3, @netrom}, [@default, @rose, @null, @null, @remote, @null, @rose, @default]}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001180)=""/139, 0x8b}, {&(0x7f0000001240)=""/92, 0x5c}, {&(0x7f00000012c0)=""/65, 0x41}, {&(0x7f0000001340)=""/162, 0xa2}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x5}, 0x376c70cf}, {{&(0x7f0000001480)=@nfc, 0x80, &(0x7f0000001500)=[{&(0x7f0000003600)=""/226, 0xe2}, {&(0x7f0000003700)=""/240, 0xf0}], 0x2, &(0x7f0000001540)=""/39, 0x27}, 0x3f}], 0x4, 0x40, &(0x7f0000001580)) r8 = accept(0xffffffffffffffff, &(0x7f0000003900)=@vsock, &(0x7f0000003980)=0x80) sendmmsg$unix(r0, &(0x7f0000003a40)=[{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000380)="3b9c4fda2f33c0daf0ee5964623e7ca05a54752cbf112c24ee76b1d60c843e9a8a6c8a2560c4c40cdd026548d4494021ae38b8b1b3abc340255b09ed354f6d33b29c1b35d924eaa4566f55e553ce5684a5d2ae67db322cd76ca3ee06842c7dcf854bd8b90a5ce6f085e22e98a021c1f4e902ec5bd02600ab9c3311de9a11808da9050225726af2043f554c5f770b9070e8f9bf84117625e03a070f85612e7c3034c68076e3145db51a51e78f7c6e152421b5676f98fd4691113869368d370fc741be1045ee1c8e14fd1d7e036a", 0xcd}], 0x1, &(0x7f00000039c0)=[@rights={0x20, 0x1, 0x1, [r1, r2, r3]}, @rights={0x28, 0x1, 0x1, [r4, r5, r6, r7, r8]}], 0x48, 0x40000}], 0x1, 0x80) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, 0x0, &(0x7f0000000d80)) r10 = dup2(r9, r9) sendmsg$IPVS_CMD_GET_CONFIG(r10, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0xfffffffd}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="4500b091e5fb02a45fcbf9c9c86a32e1286ec7ad5269a445251954d4895f2b460900006602899f17bf3243d03db2717aeb5719ee70dd179bc6dd3954c3031659eab8d6efefa19fbc9994b538b6dfbd9a444a0ae36b231be666702002f91846b4c756915faf2b7b097d23b2529aa0f02f2a2dba77fb970044de7191c085dc05cf52d7335bf8410d79557dc5b3261599c74301d2"], 0x1}}, 0x0) sendmsg$FOU_CMD_DEL(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) sendto$inet(r9, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r9, 0xc0189436, &(0x7f0000000c80)=ANY=[@ANYBLOB]) ioctl$SG_IO(r10, 0x2285, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000005c0)=""/67) ioctl$VIDIOC_SUBDEV_G_SELECTION(r10, 0xc040563d, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x1, {0x4, 0x7, 0x4, 0x2}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r10, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000010}, 0xc, &(0x7f00000007c0)={&(0x7f0000000a80)=@can_newroute={0x3c, 0x18, 0x100, 0x0, 0x25dfdbff, {0x1d, 0x1, 0x2}, [@CGW_MOD_OR={0x18, 0x2, {{{0x0, 0x1, 0xb1d0, 0x4}, 0x7, 0x2, 0x0, 0x0, "cbb882f5703b9fab"}, 0x1}}, @CGW_DST_IF={0x8}, @CGW_LIM_HOPS={0x8, 0xd, 0x7c5}]}, 0x3c}}, 0x8010) r11 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, r11) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) 00:53:50 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:50 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xec04, 0x0, 0x0) 00:53:50 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x3f000000}}) [ 759.195407][T25767] XFS (loop5): Invalid superblock magic number 00:53:50 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x20000, 0x0, 0x0) 00:53:50 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:50 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x8cffffff}}) 00:53:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:51 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x400000, 0x0, 0x0) 00:53:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:51 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xa0008000}}) 00:53:51 executing program 3: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x216}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000080)=""/80) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000140), 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0) 00:53:51 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1000000, 0x0, 0x0) 00:53:51 executing program 4 (fault-call:1 fault-nth:0): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:51 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xc0ed0000}}) [ 760.336133][T25925] XFS (loop5): Invalid superblock magic number 00:53:51 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x2000000, 0x0, 0x0) 00:53:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:51 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xf6ffffff}}) 00:53:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:52 executing program 3: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) r2 = socket$inet6(0xa, 0x3, 0x7) sendto$packet(r0, &(0x7f00000001c0)="3b7c99a7e7c01ab724d9978e64ef535e4941bd507cec187777fbbc712ef89acaf2ed75a52690a4d5383926f9d67ca5dade9d6f5bb6cffaf3778a4bb6a99798961b57979264beae54ec9e9d26c8ce636cbc700b3a826d49db673d72aabe47c263316156eddff0d2a296917dd8d9cc80", 0x6f, 0x20000084, &(0x7f0000000240)={0x11, 0x8, r1, 0x1, 0x60b6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x14) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) 00:53:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000002, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:52 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x3000000, 0x0, 0x0) 00:53:52 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xfeffffff}}) 00:53:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000006, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:52 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x4000000, 0x0, 0x0) 00:53:52 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xffff0000}}) 00:53:52 executing program 3: r0 = socket$inet(0x10, 0x3, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) recvfrom$netrom(r2, &(0x7f0000000140)=""/211, 0xd3, 0x40000002, 0x0, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) [ 761.447076][T26121] XFS (loop5): Invalid superblock magic number 00:53:52 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x5000000, 0x0, 0x0) 00:53:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000600, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) [ 761.882744][T26217] XFS (loop5): Invalid superblock magic number 00:53:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:53 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xfffffe00}}) 00:53:53 executing program 3: mknod$loop(0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = msgget$private(0x0, 0x200) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000000)=""/9) epoll_wait(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) close(r0) flock(r0, 0x8) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, &(0x7f0000000200)=0x8dcd0eb170d322a) 00:53:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x600000000000ff00, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:53 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x6000000, 0x0, 0x0) 00:53:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000001000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:53 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xffffff7f}}) 00:53:53 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x7000000, 0x0, 0x0) 00:53:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000002000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:53 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x8000000, 0x0, 0x0) [ 762.553018][T26242] XFS (loop5): Invalid superblock magic number 00:53:53 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xffffff8c}}) [ 763.081803][T26374] XFS (loop5): Invalid superblock magic number 00:53:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:54 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xfffffff6}}) 00:53:54 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x9000000, 0x0, 0x0) 00:53:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000006000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:54 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x40, 0x88000) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000000)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) geteuid() flistxattr(r0, &(0x7f0000000140)=""/154, 0x9a) 00:53:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000007fffffe, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:54 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xa000000, 0x0, 0x0) 00:53:54 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xfffffffe}}) 00:53:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x60000000feffff07, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:54 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xb000000, 0x0, 0x0) 00:53:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) timerfd_create(0xb, 0x80800) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3c) [ 763.748312][T26405] XFS (loop5): Invalid superblock magic number [ 764.151185][T26630] XFS (loop5): Invalid superblock magic number 00:53:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:55 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xedc000000000}}) 00:53:55 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xc000000, 0x0, 0x0) 00:53:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x60000000ff000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$cont(0x7, r2, 0x8, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0x3) getsockname$packet(r1, &(0x7f0000000000), &(0x7f0000000040)=0x14) getsockopt$packet_buf(r1, 0x107, 0x13, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0xf0) 00:53:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x8001000000000000, 0x80, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:55 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xd000000, 0x0, 0x0) 00:53:55 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x1000000000000}}) 00:53:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x2, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) [ 764.785397][T26682] XFS (loop5): Invalid superblock magic number [ 765.322882][T26783] XFS (loop5): Invalid superblock magic number 00:53:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:56 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xe000000, 0x0, 0x0) 00:53:56 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) set_mempolicy(0x4008001, &(0x7f0000000000)=0x6, 0x10001) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002b80)={0x0, 0x312, &(0x7f0000847000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000ff000000003300000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000100726d643136300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x308}}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x467, 0x840) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r3 = getegid() fchown(r1, r2, r3) connect$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0x3}}, 0x10) 00:53:56 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x8000a0ffffffff}}) 00:53:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x3, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) [ 765.798570][T26802] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. 00:53:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:57 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xf000000, 0x0, 0x0) 00:53:57 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xfeffff00000000}}) 00:53:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x4, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:57 executing program 3: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x400020015) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) clone(0x3ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=""/107, &(0x7f0000000180)=""/231, &(0x7f0000000100)=""/48, 0x7000}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000003c0)) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f64111465760000000000000000000000"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xce, 0x0, &(0x7f0000000280)) ioprio_set$pid(0x2, 0x0, 0x0) [ 766.009476][T26834] XFS (loop5): Invalid superblock magic number 00:53:57 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x10000000, 0x0, 0x0) [ 766.531554][T27043] XFS (loop5): Invalid superblock magic number 00:53:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:58 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x100000000000000}}) 00:53:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x5, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:58 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x11000000, 0x0, 0x0) 00:53:58 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffc6}}, &(0x7f0000000480)='syzkaller\x00'}, 0x48) r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80000) getsockopt$inet6_dccp_int(r0, 0x21, 0x1f, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:53:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x6, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:58 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x200000000000000}}) 00:53:58 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x12000000, 0x0, 0x0) [ 767.195004][T27073] XFS (loop5): Invalid superblock magic number 00:53:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x7, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:58 executing program 3: socketpair$unix(0x1, 0xfff7fffffffffffe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="9800000007000000000700000000000061150000000000009500000000000000"], &(0x7f0000000040)='GPL\x00'}, 0x48) 00:53:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:53:59 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x900000000000000}}) 00:53:59 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x13000000, 0x0, 0x0) 00:53:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x8, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:53:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008911, &(0x7f0000000040)="0adc1f123c12a41d88b070") unshare(0x4000400) r1 = socket(0x22, 0x2, 0x2) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000240)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x7f, 0x7f, 0x1, 0x3, 0x6, [{0x7d, 0x1fffffffc000000, 0x6, 0x0, 0x0, 0x2000}, {0x8, 0x5, 0x6, 0x0, 0x0, 0x80}, {0x1d, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x80}, {0x2, 0x0, 0x8, 0x0, 0x0, 0x200}, {0x7ff, 0xe45a, 0x0, 0x0, 0x0, 0x84}, {0x2, 0xff, 0x46, 0x0, 0x0, 0x800}]}) 00:53:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0xa, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:53:59 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x14000000, 0x0, 0x0) 00:53:59 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x1000000000000000}}) 00:53:59 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="65786563207539b358c17c04037b5da6866c646b00d043968e89fa8cba47c800000000800000015ac84f9d9f643143d5cbeb72e14067648075b0f9066d4adb1f7044e305b4c00a703a39361e32e71b4a12f7d80d1f27c5aa385413e6ad41639db5e6e324530457789a933c85eda66056693ea368"], 0x6) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/115, 0x73}], 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xb998, 0x40) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x3dd, 0x1, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x100000000}) 00:53:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0xb, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) [ 768.219236][T27330] XFS (loop5): Invalid superblock magic number 00:53:59 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x15000000, 0x0, 0x0) [ 768.673641][T27557] XFS (loop5): Invalid superblock magic number 00:54:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:54:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0xc, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:54:00 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x2000000000000000}}) 00:54:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x431, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01e00, 0x1, 0x0, 0x0, 0x2000000000002) 00:54:00 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="65786563207539b358c17c04037b5da6866c646b00d043968e89fa8cba47c800000000800000015ac84f9d9f643143d5cbeb72e14067648075b0f9066d4adb1f7044e305b4c00a703a39361e32e71b4a12f7d80d1f27c5aa385413e6ad41639db5e6e324530457789a933c85eda66056693ea368"], 0x6) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/115, 0x73}], 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xb998, 0x40) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x3dd, 0x1, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x100000000}) 00:54:00 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x16000000, 0x0, 0x0) 00:54:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0xd, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:54:00 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x17000000, 0x0, 0x0) 00:54:00 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="65786563207539b358c17c04037b5da6866c646b00d043968e89fa8cba47c800000000800000015ac84f9d9f643143d5cbeb72e14067648075b0f9066d4adb1f7044e305b4c00a703a39361e32e71b4a12f7d80d1f27c5aa385413e6ad41639db5e6e324530457789a933c85eda66056693ea368"], 0x6) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/115, 0x73}], 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xb998, 0x40) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x3dd, 0x1, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x100000000}) 00:54:00 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x2010000000000000}}) [ 769.320394][T27582] XFS (loop5): Invalid superblock magic number 00:54:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0xf, &(0x7f0000000340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x180, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 00:54:00 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8002, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x18000000, 0x0, 0x0) [ 769.812118][T27615] WARNING: CPU: 1 PID: 27615 at kernel/locking/lockdep.c:1024 lockdep_register_key+0x10d/0x490 [ 769.822474][T27615] Kernel panic - not syncing: panic_on_warn set ... [ 769.824145][ T3877] kobject: 'loop5' (000000009df57927): kobject_uevent_env [ 769.829086][T27615] CPU: 1 PID: 27615 Comm: syz-executor.5 Not tainted 5.0.0-next-20190306 #4 [ 769.829096][T27615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.829100][T27615] Call Trace: [ 769.829129][T27615] dump_stack+0x172/0x1f0 [ 769.829149][T27615] ? lockdep_register_key+0xf0/0x490 [ 769.829177][T27615] panic+0x2cb/0x65c [ 769.842014][ T3877] kobject: 'loop5' (000000009df57927): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 769.844944][T27615] ? __warn_printk+0xf3/0xf3 [ 769.844972][T27615] ? lockdep_register_key+0x10d/0x490 [ 769.844987][T27615] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 769.845001][T27615] ? __warn.cold+0x5/0x45 [ 769.845015][T27615] ? lockdep_register_key+0x10d/0x490 [ 769.845027][T27615] __warn.cold+0x20/0x45 [ 769.845040][T27615] ? lockdep_register_key+0x10d/0x490 [ 769.845056][T27615] report_bug+0x263/0x2b0 [ 769.845168][T27615] do_error_trap+0x11b/0x200 [ 769.926309][T27615] do_invalid_op+0x37/0x50 [ 769.930724][T27615] ? lockdep_register_key+0x10d/0x490 [ 769.936149][T27615] invalid_op+0x14/0x20 [ 769.940313][T27615] RIP: 0010:lockdep_register_key+0x10d/0x490 [ 769.946286][T27615] Code: 75 23 e9 e5 01 00 00 48 89 da 48 c1 ea 03 42 80 3c 3a 00 0f 85 b1 02 00 00 48 8b 1b 48 85 db 0f 84 c7 01 00 00 4c 39 e3 75 dd <0f> 0b 48 c7 c0 b8 57 5e 89 48 ba 00 00 00 00 00 fc ff df 48 89 c1 [ 769.965880][T27615] RSP: 0018:ffff88808a8efa50 EFLAGS: 00010046 [ 769.971944][T27615] RAX: dffffc0000000000 RBX: ffff88809c216b98 RCX: 1ffffffff12bcaf7 [ 769.979905][T27615] RDX: 1ffffffff1467b6e RSI: 0000000000000000 RDI: ffff8880582fce7c [ 769.987869][T27615] RBP: ffff88808a8efa80 R08: ffffffff8a33db70 R09: ffffed101151df3f [ 769.995845][T27615] R10: ffffed101151df3e R11: 0000000000000003 R12: ffff88809c216b98 [ 770.003818][T27615] R13: 000000000000069a R14: 0000000000000286 R15: dffffc0000000000 [ 770.011880][T27615] alloc_workqueue+0x427/0xe70 [ 770.016641][T27615] ? up_write+0x1c/0x150 [ 770.021010][T27615] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 770.026719][T27615] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 770.033104][T27615] ? xfs_open_devices+0x14a/0x560 [ 770.038139][T27615] xfs_init_mount_workqueues+0x27c/0x660 [ 770.043772][T27615] ? sb_set_blocksize+0xe4/0x110 [ 770.048701][T27615] xfs_fs_fill_super+0x749/0x1670 [ 770.053731][T27615] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 770.059975][T27615] mount_bdev+0x307/0x3c0 [ 770.064315][T27615] ? xfs_test_remount_options+0x90/0x90 [ 770.069864][T27615] xfs_fs_mount+0x35/0x40 [ 770.074195][T27615] ? xfs_finish_flags+0x490/0x490 [ 770.079234][T27615] legacy_get_tree+0xf2/0x200 [ 770.084004][T27615] vfs_get_tree+0x123/0x450 [ 770.088501][T27615] do_mount+0x1436/0x2c40 [ 770.092844][T27615] ? copy_mount_string+0x40/0x40 [ 770.097791][T27615] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 770.104035][T27615] ? copy_mount_options+0x280/0x3a0 [ 770.109224][T27615] ksys_mount+0xdb/0x150 [ 770.113451][T27615] __x64_sys_mount+0xbe/0x150 [ 770.118148][T27615] do_syscall_64+0x103/0x610 [ 770.122758][T27615] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 770.128673][T27615] RIP: 0033:0x45aaea [ 770.132549][T27615] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2d 8e fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0a 8e fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 770.152242][T27615] RSP: 002b:00007facaead0a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 770.160631][T27615] RAX: ffffffffffffffda RBX: 00007facaead0b30 RCX: 000000000045aaea [ 770.168584][T27615] RDX: 00007facaead0ad0 RSI: 00000000200000c0 RDI: 00007facaead0af0 [ 770.176542][T27615] RBP: 00000000200000c0 R08: 00007facaead0b30 R09: 00007facaead0ad0 [ 770.184524][T27615] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000005 [ 770.192491][T27615] R13: 0000000000000000 R14: 00000000004dbf80 R15: 00000000ffffffff [ 770.201327][T27615] Kernel Offset: disabled [ 770.205643][T27615] Rebooting in 86400 seconds..